nerdexam
(ISC)2

CCSP · Question #793

Data masking can be used to provide all of the following functionality, except:

The correct answer is C. Authentication of privileged users. Data masking replaces sensitive data with realistic but fictitious data to limit exposure. It supports use cases like providing safe test data in sandboxed/dev environments, enforcing least privilege by hiding fields users don't need, and enabling secure workflows where only part

Submitted by devops_kid· Apr 18, 2026Cloud Data Security

Question

Data masking can be used to provide all of the following functionality, except:

Options

  • ASecure remote access
  • Btest data in sandboxed environments
  • CAuthentication of privileged users
  • DEnforcing least privilege

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    94% (34)

Explanation

Data masking replaces sensitive data with realistic but fictitious data to limit exposure. It supports use cases like providing safe test data in sandboxed/dev environments, enforcing least privilege by hiding fields users don't need, and enabling secure workflows where only partial data is shown. However, data masking plays no role in authenticating users - privileged or otherwise. Authentication is handled by identity and access management (IAM) mechanisms such as passwords, MFA, and certificates, which are entirely separate from data masking.

Topics

#Data Masking#Data Security#Authentication#Security Controls

Community Discussion

No community discussion yet for this question.

Full CCSP Practice