Which risk is introduced when using only sanitized data for the testing of applications?

The correct answer is C. Unexpected outcomes may arise in production. Using only sanitized (non-production-like) data can fail to represent real data patterns, edge cases, and quality issues, so defects may not appear during testing and can lead to unexpected outcomes once the application is in production.

Submitted by the_admin· Apr 18, 2026Information Security Risk Management

Question

Options

AData disclosure may occur during the migration event.
BBreaches of compliance obligations will occur.
CUnexpected outcomes may arise in production.
DData loss may occur during the testing phase.

How the community answered

(34 responses)

B
3% (1)
C
91% (31)
D
6% (2)

Explanation

Using only sanitized (non-production-like) data can fail to represent real data patterns, edge cases, and quality issues, so defects may not appear during testing and can lead to unexpected outcomes once the application is in production.

Topics

#Risk Management#Test Data Management#Sanitized Data#Production Readiness

Community Discussion

No community discussion yet for this question.

Full CISM Practice