AZ400-Q: prevent high-severity code findings
Security wants high-severity static-analysis findings to block a pull request, with a reviewed exception path. What should be configured?
- A) A monthly manual reminder.
- B) Required CI scanning and a policy gate whose exceptions are approved, scoped, and time-bound. ✓
- C) A warning only in developer chat.
- D) A production firewall rule. Answer: B. Automated enforcement and governed exceptions make the rule repeatable. Why not the others: Reminders and chat are not merge controls; a firewall is not SAST.