nerdexam
(ISC)2

CCSP · Question #842

Which of the following best describes data masking?

The correct answer is A. A method for creating similar but inauthentic datasets used for software testing and user training.. Data masking is a data obfuscation technique that creates a structurally similar but fictitious version of data, primarily used for software testing and user training environments where real sensitive data should not be exposed. Option B describes data redaction or tokenization (

Submitted by brentm· Apr 18, 2026Cloud Data Security

Question

Which of the following best describes data masking?

Options

  • AA method for creating similar but inauthentic datasets used for software testing and user training.
  • BA method used to protect prying eyes from data such as social security numbers and credit card
  • CA method where the last few numbers in a dataset are not obscured. These are often used for
  • DData masking involves stripping out all digits in a string of numbers so as to obscure the original

How the community answered

(30 responses)
  • A
    90% (27)
  • B
    7% (2)
  • C
    3% (1)

Explanation

Data masking is a data obfuscation technique that creates a structurally similar but fictitious version of data, primarily used for software testing and user training environments where real sensitive data should not be exposed. Option B describes data redaction or tokenization (hiding specific fields like SSNs). Option C describes partial masking or truncation (e.g., showing only the last 4 digits of a card number). Option D describes data scrubbing or nulling. True data masking replaces real data with realistic-looking fake data, preserving format and referential integrity while protecting actual values.

Topics

#Data Masking#Data Protection#Test Data Management

Community Discussion

No community discussion yet for this question.

Full CCSP Practice