Question 270
A pipeline deploys to production immediately after any branch push. Which implementation decision BEST addresses this requirement?
Explanation
Correct Answer
Use protected branch triggers, environment approval gates and deployment-specific identities. This targets the primary issue because automated execution without authorization can promote unreviewed schema changes. Verification: Unapproved branch commits never reach production. Prevent recurrence: Audit pipeline changes and approval records.
Incorrect Answers
Configuring CODEOWNERS and required reviews for the finance database paths would not correct a pipeline deploys to production immediately after any branch push. Use protected branch triggers, environment approval gates and deployment-specific identities.
Branch policies are governance controls that prevent unreviewed deployment inputs.
Schema reconciliation can propose destructive changes that threaten existing records.