Question 20
The administrator applied this control: Implement an exact data match sensitive information type with the approved data schema and hashed reference dataset. The requirement is: An internal audit requests technical evidence for this requirement: A healthcare provider maintains an authoritative list of sensitive patient IDs and wants exact record matching. The owner authorizes a limited pilot before wider enforcement. What outcome should the team verify?
Explanation
Correct Answer
Test records from the approved reference set match without exposing the source identifiers in the rule. This observation most directly verifies the designed intervention: Implement an exact data match sensitive information type with the approved data schema and hashed reference dataset. The requirement being evaluated here is: An internal audit requests technical evidence for this requirement: A healthcare provider maintains an authoritative list of sensitive patient IDs and wants exact record matching. The owner authorizes a limited pilot before wider enforcement.
Incorrect Answers
The built-in classifier finds approved test identifiers at the intended confidence level serves a different requirement. It does not resolve the specific issue addressed by test records from the approved reference set match without exposing the source identifiers in the rule.
Equivalent identifiers are found in scanned documents where the selected service supports OCR serves a different requirement. It does not resolve the specific issue addressed by test records from the approved reference set match without exposing the source identifiers in the rule.
Sample real policy IDs match while random unrelated strings do not. That evidence would matter for A division is preparing a scoped Microsoft 365 rollout for this business need: An insurer must identify policy numbers that have a fixed alphanumeric structure in uploaded claim PDFs. The pilot must establish a technical control before it can expand. but the current implementation is Implement an exact data match sensitive information type with the approved data schema and hashed reference dataset. The requirement being evaluated here is: An internal audit requests technical evidence for this requirement: A healthcare provider maintains an authoritative list of sensitive patient IDs and wants exact record matching. The owner authorizes a limited pilot before wider enforcement.