The software developer is responsible for writing the code and promoting from the development network to the quality network. The network administrator is responsible for promoting code to the product

The correct answer is D. Separation of duties. Separation of duties ensures that no single individual has end-to-end control over a critical process, reducing the risk of fraud, sabotage, or undetected errors. Here, the developer controls the development-to-QA promotion stage, while the network administrator controls the QA-t

Security program management and oversight

Question

The software developer is responsible for writing the code and promoting from the development network to the quality network. The network administrator is responsible for promoting code to the production application servers. Which of the following practices are they following to ensure application integrity?

Options

AJob rotation
BImplicit deny
CLeast privilege
DSeparation of duties

How the community answered

(34 responses)

A
3% (1)
C
6% (2)
D
91% (31)

Explanation

Separation of duties ensures that no single individual has end-to-end control over a critical process, reducing the risk of fraud, sabotage, or undetected errors. Here, the developer controls the development-to-QA promotion stage, while the network administrator controls the QA-to-production stage - neither can unilaterally push untested or malicious code all the way to production. Job rotation involves moving employees between roles over time. Implicit deny is a firewall/access control default. Least privilege restricts users to only the permissions needed for their role. While least privilege may also apply here, separation of duties is the most precise term for dividing a workflow across distinct roles to maintain integrity.

Topics

#separation of duties#application integrity#code promotion#access control

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice