nerdexam
(ISC)2

CSSLP · Question #378

Which data protection approach changes or conceals sensitive values to keep them confidential when they are used in development and testing?

The correct answer is D. Obfuscation. Obfuscation is a data protection approach that intentionally changes or conceals sensitive data values to keep them confidential when used in development and testing environments.

Secure Software Testing

Question

Which data protection approach changes or conceals sensitive values to keep them confidential when they are used in development and testing?

Options

  • ACloud Data Loss Prevention
  • BAnonymization
  • CTokenization
  • DObfuscation

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • D
    91% (21)

Why each option

Obfuscation is a data protection approach that intentionally changes or conceals sensitive data values to keep them confidential when used in development and testing environments.

ACloud Data Loss Prevention

Cloud Data Loss Prevention (DLP) is a service to discover, monitor, and protect sensitive data, not a method for changing values for testing.

BAnonymization

Anonymization specifically aims to remove personally identifiable information, which is a specific form of data alteration, while obfuscation is a broader term for concealing values.

CTokenization

Tokenization replaces sensitive data with a non-sensitive equivalent (a 'token'), which is a specific method, but obfuscation is a more general term for various concealment techniques.

DObfuscationCorrect

Obfuscation involves altering data in a way that makes it unintelligible or misleading while still retaining some semblance of the original data's format or structure. This technique is often used in development and testing environments to mask sensitive production data, ensuring confidentiality while allowing developers to work with realistic-looking datasets without exposing actual sensitive information.

Concept tested: Data obfuscation for development and testing

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/data-encryption-overview#data-masking-obfuscation-and-anonymization

Topics

#Data Protection#Data Obfuscation#Test Data Management#Secure Testing

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice