Which of the following is an appropriate source for test data?

Using actual production data exclusively in the production environment for testing purposes violates the principle of environment separation and risks exposing sensitive data to unauthorized personnel or test-induced failures in live systems.

Test data with no similarities to production data fails to represent real-world scenarios, data types, and edge cases, leading to unreliable test results that do not accurately reflect system behavior under actual conditions.

A live mirror of production data replicated into a test environment exposes sensitive, unprotected production data to a less-controlled environment, creating significant privacy, compliance, and security risks.

Sanitized production data is the ideal test data source because it closely mirrors real-world data structures, volumes, and edge cases, ensuring meaningful test results. Sanitization (masking, anonymization, or pseudonymization) removes or obfuscates personally identifiable information (PII) and other sensitive data, allowing use in less-secured test environments without violating privacy regulations such as GDPR or HIPAA.