Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Separation of production and development pipelines. RBAC is useful for controlling permissions within a pipeline, but the study guide explicitly highlights that the main way to reduce the number of people who can access production is by having separate pipelines.
Best practice is to separate the pipeline that does the production pushes from the development pipeline. This reduces the number of people who can touch that production environment through the pipeline, and it isolates developers from directly modifying production.
Best practice is to separate the pipeline that does the production pushes from the development pipeline. This reduces the number of people who can touch that production environment through the pipeline, and it isolates developers from directly modifying production.