A group of developers needs access to a database in a development environment, but the database contains sensitive data. Which of the following should the database administrator do before giving the…

Question

Options

• AAudit access to tables with sensitive data.
• BRemove sensitive data from tables.
• CMask the sensitive data.
• DEncrypt connections to the development environment.

• A
  3% (1)
• B
  13% (4)
• C
  77% (23)
• D
  7% (2)

Explanation

The database administrator should mask the sensitive data before giving the developers access to the environment. Data masking is a technique that replaces sensitive data with fictitious but realistic data, such as random numbers or characters, to protect it from unauthorized access or exposure. Data masking preserves the format and structure of the original data, but does not reveal its actual value. This allows developers to work with realistic data without compromising its confidentiality or compliance. The other options are either insufficient or excessive for this scenario. For example, auditing access to tables with sensitive data may help monitor and track who accesses the data, but does not prevent it from being seen; removing sensitive data from tables may compromise the quality or completeness of the data, and may not be feasible if there is a large amount of data; encrypting connections to the development environment may protect the data in transit, but not at rest or in use.

No community discussion yet for this question.