Secure Test Data CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial analytics firm wants to share transaction data with a third-party vendor for testing a fraud detection model. The data includes individual transactions with customer IDs and amounts. The firm is concerned about re-identification. They decide to aggregate the data by customer segment and month. What is a key consideration when using this approach?

   • AAggregation increases the risk of re-identification because it groups similar records.
   • BAggregation makes the data fully anonymized and irreversible.
   • CAggregation may reduce the usefulness of the data for detecting individual-level fraud patterns.
   • DAggregation eliminates all privacy risks, so no other controls are needed.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which action is an example of data sanitization?

   • ADuplicating the database to a second server
   • BAdding an index to the database to speed up queries
   • CReplacing all social security numbers with a fixed placeholder value
   • DChanging the database collation to support multiple languages
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A hospital is preparing a test database from production data. They need to remove all patient names, social security numbers, and contact information, but keep the medical records and treatment codes for testing. Which process should they use?

   • AData deletion of all records that contain any sensitive information.
   • BData aggregation that groups records by diagnosis code.
   • CData encryption of the entire database.
   • DData masking that replaces sensitive fields with realistic fake values.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A telecom company is generating test data for a new billing system. They need the data to include a realistic mix of contract types (e.g., prepaid, postpaid, family plans) and usage patterns, but they cannot use production data. Which characteristic of the generated data is most important to ensure the billing system performs correctly under real-world conditions?

   • AThe data includes a wide variety of edge cases, such as zero usage and maximum plan limits.
   • BThe data is generated quickly and uses minimal storage.
   • CThe data reflects the same proportions of contract types and usage patterns as production.
   • DEvery record is unique and no two customers share the same phone number.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A utility company is preparing a test environment with production data. They need to hide customer names and addresses but keep the data format realistic so that the application's validation logic works correctly. Which obfuscation technique should they use?

   • AUse a lookup table to replace each name and address with a random but realistic fake value.
   • BRemove the name and address fields entirely.
   • CReplace all names with 'John Doe' and all addresses with '123 Main St'.
   • DEncrypt the name and address fields and store the key in the test environment.
   Reveal Solution Discussion Select an answer first