AZ400-Q: protect a production deployment target
Multiple pipelines can deploy to the same production environment. Each deployment must require an operations approval and pass a health check, regardless of which repository triggered it. Where should the controls be defined?
- A) In each developer’s local Git configuration.
- B) In a comment at the top of each pipeline.
- C) In a build artifact name.
- D) On the shared deployment environment as approvals/checks, with suitable environment permissions. ✓
Answer: D. Environment-scoped controls apply at the target boundary and avoid relying on every pipeline author to reproduce critical governance logic.
Why not the others: Local config, comments, and artifact names are not enforceable deployment controls.
Related
deployment-environment · dynamic-approval-checks · deployment-gate