Exam CAS-004 topic 1 question 533 discussion

SoD ensures that no single individual has control over all aspects of a critical process. By separating the responsibilities of development and deployment, developers do not have direct access to production environments. Deployment tasks are handled by a separate team or automated systems that are responsible for moving code from staging to production. It ensures that changes are reviewed, tested, and approved by multiple parties before being deployed, enhancing the overall integrity of the production environment. Why not A: Developers might still have deployment permissions if least privilege is not properly defined in the context of their roles. SoD explicitly requires that deployment duties are assigned to separate roles, which is more targeted to the issue.

With 6 options, this should be a multiple selection. If so, I would go with A. Implement least privilege access to all systems AND C. Set up policies and systems with separation of duties. These are almost always the answers to these types of questions.