Why is it important to verify obfuscation consistency across different environments?

To ensure that obfuscation is applied only in production environments

To ensure that obfuscation does not affect performance in any environment

To ensure that the same obfuscation rules are applied in development, test, and production environments

To ensure that obfuscation is reversible in all environments

What is the key difference between masking and pseudonymization?

Masking is reversible, while pseudonymization is irreversible

Masking hides part of the data, while pseudonymization replaces identifiers with artificial values

Masking uses encryption, while pseudonymization uses hashing

Masking is used for data at rest, while pseudonymization is used for data in transit

What is the purpose of attempting to reverse obfuscated data during testing?

To verify that obfuscation does not affect data format

To measure the performance impact of obfuscation

To identify weaknesses in the obfuscation that could allow an attacker to recover original data

To ensure that obfuscated data is completely irreversible

Which of the following is an example of a leakage vulnerability in obfuscated data?

Obfuscated data is used in test environments

Obfuscated data is encrypted with a strong algorithm

Obfuscated data is stored in a separate database

Obfuscated values retain the same distribution as the original data, allowing an attacker to infer likely values

Which testing approach is most appropriate for verifying that obfuscated data cannot be linked back to the original data?

Verify that obfuscated data is consistent across different environments

Attempt to reverse the obfuscation using known algorithms and compare the result to the original data

Measure the time it takes to obfuscate a large dataset

Check that all sensitive fields are obfuscated in the production database

Certified Tester Security Tester

Domain 5Objective 7

Data Obfuscation CT-SEC Practice Questions (Page 2)

Part of the Testing Security Mechanisms domain, which makes up ~17% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

8concepts

Questions 6–10

6foundation · easy
Why is it important to verify obfuscation consistency across different environments?
Select an answer first
7foundation · easy
What is the key difference between masking and pseudonymization?
Select an answer first
8foundation · easy
What is the purpose of attempting to reverse obfuscated data during testing?
Select an answer first
9foundation · easy
Which of the following is an example of a leakage vulnerability in obfuscated data?
Select an answer first
10foundation · easy
Which testing approach is most appropriate for verifying that obfuscated data cannot be linked back to the original data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.