Certified Cloud Security Professional (CCSP) — Question 317

You just hired an outside developer to modernize some applications with new web services and functionality. In order to implement a comprehensive test platform for validation, the developer needs a data set that resembles a production data set in both size and composition.
In order to accomplish this, what type of masking would you use?

Answer options

• A. Development
• B. Replicated
• C. Static
• D. Dynamic

Correct answer: C

Explanation

Static data masking is appropriate here as it creates a copy of the production data with sensitive information removed, allowing the developer to work with a dataset that mimics the real one in both size and structure. Development masking is less robust for this purpose, replicated data might not ensure privacy, and dynamic masking alters data in real-time, which may not suit the developer's validation needs.