Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 39
Your organization wants to incorporate DevOps practices to improve efficiency in application development and deployment. Which of the following would be the BIGGEST challenge related to security?
- A Integrating the security team into the design process to audit changes in real time.
- B Standardizing security assessments to ensure regulatory compliance.
- C Responding to vulnerability alerts and patching system assets in a timely manner.
- D Maintaining proper separation of duties between development and operations.
Reveal correct answer
Correct answer: D
Explanation
OBJ. 8.1 - In a DevOps environment, maintaining separation of duties is a challenge because developers and operations staff often share responsibilities. This can blur the lines between roles, increasing the risk of unauthorized changes or security vulnerabilities. While regulatory compliance and timely patching are also concerns, they are more easily managed. For support or reporting issues, include Question ID: 67d969d2bfb8b304f5d76515 in your ticket. Thank you.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
