An IS auditor’s PRIMARY concern when application developers wish to use a copy of yesterday’s production transaction file for volume tests is that:

A.
users may prefer to use contrived data for testing.

B.
unauthorized access to sensitive data may result.

C.
error handling and credibility checks may not be fully proven.

D.
the full functionality of the new process may not necessarily be tested.

Explanation:
Unless the data are sanitized, there is a risk of disclosing sensitive data.