Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C is right, because it is very important.
This is because programmers who have access to code after editing may introduce unauthorized or malicious changes that could compromise the security, functionality, or performance of the application
The scenario describes a situation where a malicious code issue was supposedly corrected but reappeared after deployment. This indicates a possibility of source code tampering, misconfiguration, or inadvertent re-introduction of the issue during the build or deployment process. One of the best ways to ensure that only clean, verified code is deployed to production is to compile the code on a dedicated server. This dedicated server should be isolated from development and source code modifications, thereby ensuring that the build process is secure, controlled, and free from tampering or errors.