A deployment team can release production code, approve its own elevation, and delete the logs. Which two architectural changes address the privileged control problem? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Protect the deployment identity/path according to production impact
B.Separate approval and audit-evidence control from deployment authority
C.Protect human accounts while excluding the deployment identity
D.Review only direct directory administrator roles
E.Use short elevation windows but retain self-approval and log deletion

Show the answer and explanation

✓ Correct answers

Protect the deployment identity/path according to production impact
Separate approval and audit-evidence control from deployment authority

Segregated approval/evidence and protected deployment paths address the impact. Short duration alone preserves self-approval/evidence abuse, direct-role-only reviews miss indirect paths, and excluding deployment identities ignores their production authority.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.