Which security coding technique is described as replacing sensitive data with realistic fictional data?

Which security coding technique is described as replacing sensitive data with realistic fictional data?

• A. Obfuscation.
• B. Camouflage.
• C. Input validation.
• D. Output encoding.

Answer: (B)

Replacing sensitive data with realistic fictional data is a form of data masking, typically achieved through obfuscation. The idea is to protect confidentiality while preserving the look and feel of real data so tests and development can run without exposing actual records. By substituting values with plausible ones that maintain the same formats, lengths, and distributions, applications behave as they would with real data, but without revealing it. This is the best fit because it explicitly involves substituting real values with believable yet fake data to hide sensitive information. Input validation checks whether data meets required rules and constraints, but doesn’t replace data. Output encoding focuses on safely rendering data for display, not on masking underlying values. Camouflage isn’t a standard security term used for this purpose. For example, a real credit card number can be replaced with a synthetic number that passes the same format and checks, preserving testing realism while protecting the actual card data.

Replacing sensitive data with realistic fictional data is a form of data masking, typically achieved through obfuscation. The idea is to protect confidentiality while preserving the look and feel of real data so tests and development can run without exposing actual records. By substituting values with plausible ones that maintain the same formats, lengths, and distributions, applications behave as they would with real data, but without revealing it.

This is the best fit because it explicitly involves substituting real values with believable yet fake data to hide sensitive information. Input validation checks whether data meets required rules and constraints, but doesn’t replace data. Output encoding focuses on safely rendering data for display, not on masking underlying values. Camouflage isn’t a standard security term used for this purpose. For example, a real credit card number can be replaced with a synthetic number that passes the same format and checks, preserving testing realism while protecting the actual card data.