Question 8
Domain 1: Data Collection, Use, Dissemination, and DestructionA city wants to release repeated statistics about scooter trips while reducing the risk that rare trips can be singled out over time. Which technique is best suited for that problem?
Correct answer: A
Explanation
Differential privacy is designed to let an organization release statistics while limiting what can be learned about any one person or rare event. It adds controlled noise so repeated disclosures do not allow someone to “single out” an individual trip over time.
Why each option is right or wrong
A. Differential privacy
Differential privacy is the standard mechanism for publishing aggregate statistics while bounding the incremental information any single record contributes, so repeated releases do not let an analyst infer whether a rare scooter trip occurred. In formal terms, it satisfies the b5-differential privacy guarantee, where the output distribution changes only by a factor of e^b5 when one individual's data is added or removed, which is exactly the protection needed against singling out over time.
B. Plain pseudonymization
C. Full-disk encryption
D. Role-based access control