SC-100 Practice Question 3865
Exam: SC-100
Domain: Design solutions that align with security best practices and priorities
Difficulty: medium
You are evaluating trade-offs between business velocity and security posture for a software development organization. Which approach best embeds security into cloud engineering without slowing deployment velocity?
Answer Options
A
Adopting DevSecOps with automated SAST, SCA, and IaC security in CI/CD pipelines
B
Requiring manual paper signature approval for every code commit
C
Disabling production deployments completely
D
Permitting developers to deploy directly to production without testing
Correct Answer
A: Adopting DevSecOps with automated SAST, SCA, and IaC security in CI/CD pipelines
Explanation
Adopting a DevSecOps model that embeds automated static code analysis, software composition analysis (SCA), and Infrastructure-as-Code (IaC) security checks directly into CI/CD pipelines.