Certified Development Lifecycle and Deployment ArchitectDemo

Question

Which two options should be taken into account when making production changes in a highly regulated and audited environment?

Choose two

A All changes including hotfixes should be reviewed against security principles.
B After deployment, the development team should test and verity functionality in production.
C Any production change should have explicit stakeholder approval.
D No manual steps should be carried out.

Explanation

Production changes in regulated environments require assessment against security principles and explicit approval by authorized stakeholders to provide governance, risk control, and an auditable record. Testing should be completed before production deployment rather than performed by the development team in production. Microsoft guidance requires documented production change requests to include security impact and approval by authorized personnel.

Learn more

Certified Development Lifecycle and Deployment ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ78

Community Discussion