An enterprise is undergoing an audit to review change management activities when promoting code to production. The audit reveals the following:
•	Some developers can directly publish code to the production environment.
•	Static code reviews are performed adequately.
•	Vulnerability scanning occurs on a regularly scheduled basis per policy.
Which of the following should be noted as a recommendation within the audit report?

A. Implement short maintenance windows.

B. Perform periodic account reviews.

C. Implement job rotation.

D. Improve separation of duties.








 

Suggested Answer: D

Community Answer: D



This question is in CAS-004 CompTIA Advanced Security Practitioner (CASP+) Exam
For getting CompTIA Advanced Security Practitioner (CASP+) Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by CompTIA. 
Trademarks, certification & product names are used for reference only and belong to CompTIA.
The website does not contain actual questions and answers from CompTIA's Certification Exams.