What is a defining characteristic of data anonymization?

The transformation is irreversible, preventing identification of individuals

The data is encrypted using a strong algorithm

The data is deleted from the production environment

The transformation is reversible with a key

What is the main reason test data should be representative of production data?

To ensure the test environment uses the same hardware as production

To increase the likelihood of discovering defects that would occur in real-world usage

To eliminate the need for test case design

To guarantee that no security vulnerabilities exist in the application

Why is it important for generated test data to include edge cases and outliers that match production patterns?

To make the test data easier to encrypt

To ensure the database schema is normalized

To verify that the application handles rare but possible input values correctly

To reduce the storage space required for the test database

What is the primary goal of data obfuscation in a test environment?

To reduce the size of the test database

To encrypt all data so that it cannot be read by anyone

To hide sensitive information while preserving the data's usability for testing

To delete all records that contain personal information

Which technique is an example of data obfuscation?

Compressing the database file to save space

Deleting all rows from the customer table

Backing up the database to an external drive

Replacing real customer names with randomly generated names

Certified Secure Software Lifecycle Professional

Domain 6Objective 7

Secure Test Data CSSLP Practice Questions (Page 4)

Part of the Secure Software Testing domain, which accounts for 14% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

14%of the exam

Questions 16–20

16foundation · easy
What is a defining characteristic of data anonymization?
Select an answer first
17foundation · easy
What is the main reason test data should be representative of production data?
Select an answer first
18foundation · easy
Why is it important for generated test data to include edge cases and outliers that match production patterns?
Select an answer first
19foundation · easy
What is the primary goal of data obfuscation in a test environment?
Select an answer first
20foundation · easy
Which technique is an example of data obfuscation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.