Secure Test Data CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does data aggregation reduce the risk of re-identification in test data?

   • ABy combining individual records into groups so that no single person can be distinguished
   • BBy deleting all records that contain personal information
   • CBy encrypting individual records with a strong algorithm
   • DBy adding random noise to each individual record
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of generating test data in a secure software testing lifecycle?

   • ATo replace the need for a production environment during all testing phases
   • BTo reduce the total number of test cases required for full code coverage
   • CTo create realistic and controlled data that exercises the application without exposing sensitive production information
   • DTo ensure that all test cases are executed with identical data values every time
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A health research firm wants to publish a dataset of patient records for academic testing. They need to ensure that patients cannot be re-identified. The dataset includes age, gender, zip code, and diagnosis. Which approach provides the strongest anonymization?

   • AAggregate the data by diagnosis only, removing all demographic fields.
   • BGeneralize zip codes to the first three digits and group ages into ranges.
   • CRemove names and social security numbers, but keep age, gender, zip code, and diagnosis.
   • DEncrypt the diagnosis field and provide the key to researchers.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A software company is considering using a copy of production data for testing a new release. The data contains customer names, addresses, and purchase history. The team wants to minimize the risk of exposing this sensitive information while still benefiting from realistic data. Which action should they take?

   • ADelete all records that contain any personal information.
   • BRestrict access to the test environment and rely on the team's confidentiality agreements.
   • CApply data sanitization techniques to remove or modify sensitive fields before using the data.
   • DUse the production data as-is because it is the most realistic.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which approach best supports generating test data that maintains referential integrity across related tables?

   • AUsing only numeric data types for all columns
   • BInserting parent rows before child rows that reference them
   • CDisabling all database constraints during data generation
   • DInserting data into all tables in random order
   Reveal Solution Discussion Select an answer first