A payment processor needs to tokenize credit card numbers for use in its e-commerce platform. The tokenization system must ensure that a token cannot be reversed to the original card number without access to the token vault, and that the vault itself is highly protected. Which design should the company implement?

Generate tokens using a cryptographic hash of the card number and store the hash in the application database

Generate tokens by truncating the card number to the last four digits

Generate random tokens, store the card number-to-token mapping in a hardened token vault, and restrict access to the vault

Encrypt the card number with AES-256 and use the ciphertext as the token

In the context of cloud key management, which practice is most important to limit the impact of a compromised encryption key?

Rotating the key on a regular schedule or upon suspicion of compromise

Sharing the key with multiple cloud providers for redundancy

Using a longer key length than recommended by the algorithm

Storing the key in the same region as the data it protects

Which of the following is a common use case for tokenization?

Providing non-repudiation for digital transactions

Protecting payment card numbers in a cloud payment system

Encrypting data at rest in a cloud database

Verifying the integrity of a downloaded file

Which of the following is a common technique used by DLP systems to identify sensitive data?

Content inspection and pattern matching

Certified Cloud Security Professional

Domain 2Objective 3

Design and Apply Data Security Technologies and Strategies CCSP Practice Questions (Page 6)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

12concepts

20%of the exam

Questions 26–30

26application · medium
A payment processor needs to tokenize credit card numbers for use in its e-commerce platform. The tokenization system must ensure that a token cannot be reversed to the original card number without access to the token vault, and that the vault itself is highly protected. Which design should the company implement?
Select an answer first
27foundation · easy
In the context of cloud key management, which practice is most important to limit the impact of a compromised encryption key?
Select an answer first
28foundation · easy
Which of the following is a common use case for tokenization?
Select an answer first
29foundation · easy
A development team needs to use a production database in a test environment. Which data protection technique should they use to protect sensitive values while preserving the data's format and usability for testing?
Select an answer first
30foundation · easy
Which of the following is a common technique used by DLP systems to identify sensitive data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Design and Apply Data Security Technologies and Strategies CCSP Practice Questions (Page 6)

Questions 26–30

In the context of cloud key management, which practice is most important to limit the impact of a compromised encryption key?

Which of the following is a common use case for tokenization?

A development team needs to use a production database in a test environment. Which data protection technique should they use to protect sensitive values while preserving the data's format and usability for testing?

Which of the following is a common technique used by DLP systems to identify sensitive data?

Keep studying — Cloud Data Security