Which of the following will accomplish the desired objective?

A cloud architect wants to minimize the risk of having systems administrators in an IaaS compute instance perform application code changes. The development group should be the only group allowed to modify files in the directory.

Which of the following will accomplish the desired objective?
A . Remove the file write permissions for the application service account.
B . Restrict the file write permissions to the development group only.
C . Add access to the fileshare for the systems administrator’s group.
D . Deny access to all development user accounts

View Answer

Answer: B

Explanation:

File write permissions are permissions that control who can modify or delete files in a directory or system. Restricting the file write permissions to the development group only can help minimize the risk of having systems administrators in an IaaS compute instance perform application code changes, as it can prevent anyone other than the development group from altering or removing any files in the directory where the application code is stored. Restricting the file write permissions can also help maintain consistency and integrity, as it can ensure that only authorized and qualified users can make changes to the application code.

Reference: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7