Secure Test Data CSSLP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A government agency is developing a new benefits eligibility system. They need test data that reflects the diversity of the population they serve, including different income levels, family sizes, and geographic regions. They are not allowed to use actual citizen data. Which approach should they take?

   • ACopy production data to a secure environment and restrict access.
   • BCreate test data manually with a few typical cases.
   • CUse a small sample of citizen data and remove all names.
   • DGenerate synthetic data based on demographic statistics from public census reports.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of data tokenization in a test environment?

   • ATo replace sensitive data with non-sensitive placeholders that maintain referential integrity
   • BTo compress the data to save storage space
   • CTo encrypt the data so that only authorized users can read it
   • DTo delete all sensitive data from the database
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial services firm is building a new test environment for its loan-origination system. The QA team wants to use synthetic data instead of production data. They need the test data to reflect the same proportion of loan types (e.g., mortgages, auto, personal) and the same average loan amounts as production, so that performance testing is meaningful. Which approach best meets this requirement?

   • ACopy a small sample of production records and replace all names and account numbers with fake values.
   • BUse the first 1000 production records as-is, since they are already representative of the whole dataset.
   • CGenerate data with random values for all fields, ensuring each loan type appears equally often.
   • DGenerate synthetic data using statistical profiles derived from production aggregates, such as loan-type percentages and amount ranges.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of data sanitization in non-production environments?

   • ATo remove or modify sensitive data so it is safe for use outside production
   • BTo increase the speed of database queries
   • CTo ensure all data is encrypted at rest
   • DTo make the data more realistic for performance testing
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A payment processing company is using production data in a test environment. They need to replace credit card numbers with placeholders that can be used consistently across multiple tables (e.g., `Orders` and `Payments`) so that joins still work. Which technique should they use?

   • AReplace each credit card number with a random number for each occurrence.
   • BEncrypt the credit card numbers and store the key in the application configuration.
   • CTruncate credit card numbers to the last four digits.
   • DUse a tokenization service that maps each unique credit card number to a unique token.
   Reveal Solution Discussion Select an answer first