Câu 107: CAS-005: CompTIA SecurityX

A company wants to modify its process to comply with privacy requirements after an incident involving PII data in a development environment. In order to perform functionality tests, the QA team still needs to use valid data in the specified format. Which of the following best addresses the risk without impacting the development life cycle?

1. A. Encrypting the data before moving Into the QA environment
2. B. Truncating the data to make it not personally identifiable
3. C. Using a large language model to generate synthetic data
4. D. Utilizing tokenization for sensitive fields — đáp án hiện tại