Data Obfuscation CT-SEC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of data obfuscation in a software system?

   • ATo permanently destroy data so it cannot be recovered under any circumstances
   • BTo make data unreadable to unauthorized users while preserving its usability for authorized purposes
   • CTo encrypt data so that only the intended recipient can decrypt it
   • DTo compress data to reduce storage and transmission costs
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security tester is assessing a data masking implementation that replaces customer names with random names. The tester notices that the masked data still preserves the original name length and the first letter. What type of information leakage does this reveal?

   • AThe masking is not encrypted, so it is not secure
   • BThe masked data can be linked to the original data through inference
   • CThe masking is not applied consistently across all fields
   • DThe masking is reversible because the algorithm is deterministic
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which data obfuscation technique replaces sensitive values with non-sensitive substitutes that have no meaningful relationship to the original data?

   • AEncryption
   • BTokenization
   • CPseudonymization
   • DMasking
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial institution is implementing data obfuscation across its systems. The security team has identified that customer account numbers appear in multiple databases, log files, and API responses. They want to ensure that all occurrences of account numbers are obfuscated consistently. What should the security team do first to assess the coverage of obfuscation?

   • AReview the database schema to identify all tables containing account numbers
   • BTest the obfuscation on a sample of data to see if it works
   • CImplement obfuscation in the API layer and assume it covers all data flows
   • DConduct a data discovery scan to identify all locations where account numbers are stored or transmitted
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which metric is most relevant when evaluating the performance impact of obfuscation?

   • AThe consistency of obfuscation across environments
   • BThe time taken to obfuscate and de-obfuscate data
   • CThe number of data fields obfuscated
   • DThe strength of the obfuscation algorithm
   Reveal Solution Discussion Select an answer first