Secure Test Data CSSLP Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A gaming company is generating test data for a new matchmaking system. Production data shows that player session lengths follow a long-tail distribution, with most sessions lasting under 10 minutes and a few lasting over an hour. The QA team wants the test data to reflect this pattern. Which approach should they use?

   • AUse only the average session length for all records.
   • BGenerate session lengths uniformly between 1 and 120 minutes.
   • CGenerate random session lengths without any distribution constraints.
   • DGenerate session lengths using a distribution that matches the production histogram.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a primary risk of reusing production data for testing without any mitigation?

   • AThe test environment will run slower than production
   • BSensitive information may be exposed to unauthorized personnel
   • CThe test cases will automatically fail due to data format differences
   • DThe application will require more memory to process the data
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   When generating test data for a relational database, what does maintaining referential integrity primarily ensure?

   • AAll tables contain the same number of rows
   • BEvery foreign key value points to an existing primary key value
   • CData is encrypted before being inserted into the tables
   • DAll data values are unique across the entire database
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A retail company wants to use production data for load testing a new e-commerce platform. The data contains customer purchase histories. They are concerned about privacy but also want the test to be realistic. Which mitigation technique would best reduce privacy risk while preserving the data's usefulness for load testing?

   • ADelete all records that contain any personal information.
   • BApply data obfuscation to replace customer names and credit card numbers with fake values.
   • CAggregate the purchase data by product category and region.
   • DUse the data as-is but only in an isolated network.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Why is data anonymization considered stronger than data encryption for protecting privacy in test data?

   • AAnonymization is required by all regulatory frameworks
   • BAnonymized data cannot be reversed to identify individuals, even with a key
   • CAnonymization is faster to implement than encryption
   • DAnonymization reduces the storage size of the data
   Reveal Solution Discussion Select an answer first