Exam SY0-701 topic 1 question 547 discussion

CompTIA Security+ Explanation In risk management, a treatment strategy refers to how an organization mitigates, transfers, accepts, or avoids risk. Continuous risks are threats that persist over time and require ongoing security measures. Phishing attacks are a continuous risk because cybercriminals frequently attempt to deceive users via email. An email gateway is a technical control that continuously scans, filters, and blocks malicious emails to reduce phishing attempts. Since phishing is an ongoing (continuous) threat, deploying an email gateway is a proactive treatment strategy to mitigate it. GPT

Branch protection in a CI/CD pipeline helps prevent: Unauthorized code changes Introduction of insecure or vulnerable code Supply chain attacks

D. Branch protection as part of the CI/CD pipeline Explanation: A continuous risk refers to an ongoing or persistent risk that must be actively managed over time. Branch protection in a CI/CD pipeline helps mitigate continuous risks related to software development, such as unauthorized code changes, vulnerabilities, and misconfigurations. By enforcing rules like required code reviews and automated security checks, organizations continuously manage risks in their development workflow.