Exam CAS-005 topic 1 question 2 discussion

Actual exam question from CompTIA's CAS-005

Question #: 2
Topic #: 1

An organization is working to secure its development process to ensure developers cannot deploy artifacts directly into the production environment. Which of the following security practice recommendations would be the best to accomplish this objective?

A. Implement least privilege access to all systems.
B. Roll out security awareness training for all users.
C. Set up policies and systems with separation of duties.
D. Enforce job rotations for all developers and administrators.
E. Utilize mandatory vacations for all developers.
F. Review all access to production systems on a quarterly basis.

Show Suggested Answer

Suggested Answer: C 🗳️

by HopHopHipHip at May 8, 2025, 10:31 a.m.

Comments

Submit Cancel

HopHopHipHip

3 weeks, 3 days ago

Selected Answer: C

Separation of duties (SoD) is a foundational security principle that prevents a single individual from having control over all aspects of a critical process. In this case, it ensures that the people who write the code (developers) are not the same ones who deploy or approve it for production. Job rotations: Useful for avoiding fraud and reducing knowledge silos, but not relevant to deployment control.

upvoted 2 times

...