CCAK Question 78

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  D. Programmers cannot make uncontrolled changes to the source code production version. This option is acceptable to a cloud auditor because it indicates that there are controls in place to prevent unauthorized or uncontrolled changes to the production environment. Ensuring that programmers cannot make uncontrolled changes helps maintain the integrity, security, and stability of the production system. This control is essential for protecting against potential errors or malicious activities that could disrupt operations or compromise data. The other options present potential issues: - A. Hosting development, test, and production environments on the same network can lead to security risks and lack of proper segregation. - B. Granting programmers permanent access to production software can increase the risk of unauthorized changes. - C. Allowing the Head of Development to approve changes to production without additional oversight may not provide sufficient checks and balances.

• 1

  This question is weird, technically they are all acceptable except for B.