IsacaIsaca
CRISC · Question #118
CRISC Question #118: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #118. The question stem and answer options stay visible for context.
Submitted by khalil_dz· Apr 18, 2026Risk Response and Reporting
Question
A risk practitioner recently discovered that personal information from the production environment is required for testing purposes in non-production environments. Which of the following is the BEST recommendation to address this situation?
Options
- AEnable data encryption in the test environment.
- BPrevent the use of production data in the test environment
- CDe-identify data before being transferred to the test environment.
- DEnforce multi-factor authentication within the test environment.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Data de-identification#Test data management#Data privacy#Risk mitigation