Which control keeps one person from both approving and deploying a change?
Why D is the answer
Separation of duties
Separation of duties stops one person from both approving and deploying a change.
In detail
- Separation of duties splits approval and deployment.
- Automate the rule in your pipeline.
Use case
An illustrative scenario, not a real incident.
One person writes a change, and a different person deploys it, so a single mistake or bad act is caught.
See it in different ways
mindmap
root((Security))
Identity
Workload Identity Federation
Impersonation
Separation of duties
Data
Customer-managed keys
VPC Service Controls
Policy
Organization level
AI
Model Armormindmap
root(("Separation of duties"))
n1["Approver"]
n2["Reviews the change"]
n3["Deployer"]
n4["Releases it"]Key point: Separate approval from deployment.
Why the other options are wrong
- A. A larger machine type
- A machine type is unrelated.
- B. A global load balancer
- A load balancer is unrelated.
- C. A Shared VPC
- A network is unrelated.