Data Obfuscation CT-SEC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In which scenario is data obfuscation most commonly applied?

   • AWhen deleting data from a database to comply with privacy regulations
   • BWhen backing up data to an offsite location
   • CWhen transmitting data over a public network
   • DWhen transferring data between production and non-production environments
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a common reason why obfuscation coverage might be incomplete?

   • AObfuscation is only applied to structured data, not unstructured data
   • BObfuscation is always applied to all data, so coverage is never an issue
   • CSensitive data may appear in logs, error messages, or temporary files that are not included in the obfuscation process
   • DObfuscation is only applied to data at rest, not data in transit
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A marketing company is collecting customer data for targeted advertising. They want to share the data with a third-party analytics firm, but they are concerned about privacy regulations. They decide to use data obfuscation to protect the data. Which statement best describes the purpose of data obfuscation in this context?

   • ATo delete all sensitive data from the system
   • BTo protect sensitive information while allowing the data to be used for analysis
   • CTo encrypt the data so that only authorized parties can access it
   • DTo make the data unusable for any purpose
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is assessing the coverage of data obfuscation in a large enterprise system. They have identified that customer credit card numbers are stored in a database, appear in application logs, and are included in API responses. They want to ensure that all these instances are obfuscated. What is the most effective way to assess coverage?

   • AReview the obfuscation configuration to see which fields are included
   • BTest the obfuscation on a sample of credit card numbers
   • CSearch the database for any plaintext credit card numbers
   • DPerform a data flow analysis to trace credit card numbers through the system
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security tester is evaluating a data masking implementation that replaces email addresses with random strings. The tester notices that the masked emails still contain the same domain name as the original (e.g., @company.com). What is the potential risk of this leakage?

   • AThe masking is reversible because the domain is preserved
   • BThe masking is not encrypted, so it is not secure
   • CAn attacker could identify the company associated with the data
   • DThe masking is not applied consistently across all email fields
   Reveal Solution Discussion Select an answer first