Practice question 36 of 498 · hard
Which two controls directly reduce a compromised CI/CD system's ability to affect production? Select two answers.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Limit deployment identity permissions and permitted release contexts
- Require verified artifacts and a protected approval path before production release
Limit deployment identity permissions and permitted release contexts: Restricted authority reduces the resources and workflows an attacker can control. Require verified artifacts and a protected approval path before production release: The release boundary reduces unchecked movement from build inputs to production. Give build jobs production Owner rights to avoid deployment failures: This expands rather than reduces the potential compromise impact. Store the deployment credential in the repository history: Repository disclosure can expose production credentials. Rely only on perimeter filtering around the production web endpoint: Attackers with deployment authority can change the application behind that perimeter.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.