Exam SSE-Engineer Topic 1 Question 38 Discussion

Strata Cloud Manager ' s posture-based security checks are specifically designed to proactively enforce compliance at the point of configuration rather than after the fact: an administrator defines the compliance standards a policy must meet, and by setting the enforcement action on non-compliant checks to " deny, " SCM will actively prevent a junior engineer from committing or pushing a policy that violates those standards in the first place, functioning as a real-time guardrail rather than a retrospective audit. This directly satisfies the requirement to let junior engineers work independently while structurally preventing security-gap- introducing policies, making option A the correct, purpose-built mechanism. Option B describes a manual, workflow-heavy approach relying entirely on a senior engineer ' s diligence to catch every issue before enabling a rule; it is operationally viable but is a process control, not a platform-enforced compliance mechanism, and does not scale as well or as reliably as automated posture checks. Option C ' s auto-tagging- and-review-workflow approach is reactive rather than preventive - a policy tagged for review can still be committed and take effect before a senior engineer ever examines it, which does not prevent the security gap from existing, only flags it after the fact. There is no supported " proxy tagging methodology " feature for policy compliance enforcement in Strata Cloud Manager, making option D a fabricated and incorrect answer choice.
Reference:Strata Cloud Manager - Security Posture Management and Compliance Checks.