What are two business values of Cloud Code Security? (Choose two.)

Question

Options

• Aconsistent controls from build time to runtime
• Bprebuilt and customizable polices to detect data such as personally identifiable information (PII) in
• Csupport for multiple languages, runtimes and frameworks
• Dcontinuous monitoring of all could resources for vulnerabilities, misconfigurations, and other

• A
  95% (53)
• B
  2% (1)
• C
  4% (2)

Explanation

A and D represent core business values because they describe outcomes that directly reduce organizational risk and operational cost. A (consistent controls from build time to runtime) reflects the "shift-left" security principle - enforcing the same policies across the entire software lifecycle eliminates gaps between development and production, a measurable risk-reduction benefit. D (continuous monitoring of all cloud resources) delivers ongoing threat detection and compliance assurance without manual effort, which translates directly to lower breach risk and audit overhead.

B is wrong because PII/data detection is a feature of Data Loss Prevention (DLP) tools, not a distinguishing business value of Cloud Code Security. C is wrong because multi-language/framework support is a technical capability (breadth of coverage), not a business value - exam questions about "business value" are looking for outcomes like risk reduction, cost savings, or operational efficiency, not feature lists.

Memory tip: Filter answers by asking "Does this describe a business outcome or a technical feature?" Business values sound like boardroom language (consistent controls, continuous monitoring, cost reduction); technical features sound like a product spec sheet (supports Python, detects PII, integrates with CI/CD). A and D pass the boardroom test; B and C do not.

No community discussion yet for this question.