Certificate of Cloud Security Knowledge (CCSK) — Question 200

Which security advantage considers that anything that goes into production is created by the CI/CD pipeline on approved code and configuration templates?

Answer options

• A. Standardization
• B. SecDevOps/DevSecOps and Rugged DevOps
• C. Immutable
• D. Improved auditing and change management
• E. Automated testing

Correct answer: C

Explanation

The correct answer, 'Immutable', refers to the principle that once an application is deployed, it cannot be altered, ensuring that only approved code is used in production. Other options, while related to security and development practices, do not specifically address the assurance provided by the CI/CD pipeline in maintaining the integrity of production deployments.