nerdexam
(ISC)2

CCSP · Question #312

Which of the following is an example of useful and sufficient data masking of the string "CCSP"? Response:

The correct answer is C. TtLp. Useful and sufficient data masking replaces original data with realistic but fictional data, ensuring the original value cannot be easily inferred or reversed.

Submitted by ashley.k· Apr 18, 2026Cloud Data Security

Question

Which of the following is an example of useful and sufficient data masking of the string "CCSP"? Response:

Options

  • AXCSP
  • BPSCC
  • CTtLp
  • D3X91

How the community answered

(61 responses)
  • A
    5% (3)
  • B
    3% (2)
  • C
    90% (55)
  • D
    2% (1)

Why each option

Useful and sufficient data masking replaces original data with realistic but fictional data, ensuring the original value cannot be easily inferred or reversed.

AXCSP

"XCSP" only changes one character, allowing most of the original string to remain visible and potentially guessable.

BPSCC

"PSCC" is merely a transposition (rearrangement) of the original characters, which can often be easily reversed to reveal the original value.

CTtLpCorrect

"TtLp" is an example of data masking where the original "CCSP" string is replaced with a completely different, obfuscated string that retains the original data type (alphabetic characters) but reveals no part of the original sequence or pattern, making it difficult to infer the original value.

D3X91

"3X91" replaces the original alphabetic string with a mixed alphanumeric string, but a simple substitution cipher could potentially be used if this mapping is known, and it doesn't represent a common masking technique for sensitive text like "CCSP".

Concept tested: Data masking techniques

Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver16

Topics

#Data Masking#Data Obfuscation#Data Protection

Community Discussion

No community discussion yet for this question.

Full CCSP Practice