A software company is developing a mobile app that collects user location data. The privacy policy states that the data will be anonymized before being shared with partners. The development team is considering using encryption to anonymize the data. Why is encryption alone not sufficient for anonymization?

Encryption is too slow for mobile devices

Encryption is reversible with the key, so it does not permanently anonymize the data

Encryption only protects data in transit, not at rest

Encryption does not protect against unauthorized access

What is the purpose of assessing obfuscation coverage?

To measure the performance overhead of obfuscation

To test whether obfuscated data can be reversed

To ensure that all sensitive data elements are obfuscated across the system

To verify that obfuscation does not affect the usability of the data

What is the primary goal of testing the effectiveness of data obfuscation?

To confirm that obfuscation does not affect the performance of the application

To verify that obfuscated data cannot be reversed or linked to the original data without proper authorization

To ensure that obfuscated data is completely deleted from the system

To check that obfuscation is applied to all data fields in the database

Certified Tester Security Tester

Domain 5Objective 7

Data Obfuscation CT-SEC Practice Questions (Page 3)

Part of the Testing Security Mechanisms domain, which makes up ~17% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

8concepts

Questions 11–15

11application · medium
A software company is developing a mobile app that collects user location data. The privacy policy states that the data will be anonymized before being shared with partners. The development team is considering using encryption to anonymize the data. Why is encryption alone not sufficient for anonymization?
Select an answer first
12foundation · easy
When data is transmitted over a network, which obfuscation technique is most commonly used to protect it?
Select an answer first
13foundation · easy
Which obfuscation technique is most appropriate for protecting data while it is being processed in memory by an application?
Select an answer first
14foundation · easy
What is the purpose of assessing obfuscation coverage?
Select an answer first
15foundation · easy
What is the primary goal of testing the effectiveness of data obfuscation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Data Obfuscation CT-SEC Practice Questions (Page 3)

Questions 11–15

When data is transmitted over a network, which obfuscation technique is most commonly used to protect it?

Which obfuscation technique is most appropriate for protecting data while it is being processed in memory by an application?

What is the purpose of assessing obfuscation coverage?

What is the primary goal of testing the effectiveness of data obfuscation?

Keep studying — Testing Security Mechanisms