StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · CAF Well Architected and secure adoption

Practice question 77 of 498 · medium

Which THREE controls help protect the path from developer work to production deployment? Select THREE.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Security findings with accountable remediation and risk-based release gates
  2. B.Production secrets available to every pull-request test job
  3. C.Least-privilege deployment access separated by environment
  4. D.An assumption that runtime monitoring is unnecessary after a clean scan
  5. E.Protected branches with peer review and governed workflow changes
Show the answer and explanation

✓ Correct answers

  • Security findings with accountable remediation and risk-based release gates
  • Least-privilege deployment access separated by environment
  • Protected branches with peer review and governed workflow changes

Protected branches with peer review and governed workflow changes: These reduce unauthorized source and release modifications. Least-privilege deployment access separated by environment: This limits the effect of compromised automation. Security findings with accountable remediation and risk-based release gates: These make checks actionable. Production secrets available to every pull-request test job: This exposes production authority to less-trusted execution. An assumption that runtime monitoring is unnecessary after a clean scan: Pre-release scanning cannot establish future runtime safety.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.