Question
A group of developers needs access to a database in a development environment, but the database contains sensitive data. Which of the following should the database administrator do before giving the developers access to the environment?
- A. Audit access to tables with sensitive data.
- B. Remove sensitive data from tables.
- C. Mask the sensitive data. Correct
- D. Encrypt connections to the development environment.
Explanation
Masking replaces sensitive values with realistic but fictitious or obscured values, so developers can work with data that keeps its format and structure without seeing the real values. Removing the sensitive data would break the realistic test data developers need, auditing only records access after the fact, and encrypting connections protects data in transit but still shows the real values to the developers.
