A developer attempts to refactor and improve the application code. It is noticed that the code contains several pieces of key information that could be a security threat if this code is accessible by

Question

Options

• AHost the application code on a machine located in a secure data center.
• BUtilize environment variables for username and password details.
• CRely on the security teams' goodwill to not give access to those who do not need it.
• DMove the hardware that the application is deployed on to a secure location.

• A
  94% (49)
• B
  2% (1)
• D
  4% (2)

Explanation

The listed correct answer is hosting the application on a machine in a secure data center, which addresses the concern by restricting physical and network access to the machine running the code containing sensitive information. This limits who can access the source code or the runtime environment. Note: In modern security best practices, option B (using environment variables) is widely considered the superior approach for handling credentials and secrets in code, as it removes sensitive data from the codebase entirely. Option C relies on human goodwill, which is not a reliable security control. Option D (moving hardware) is similar to A but less specific. The intent of answer A is access restriction at the infrastructure level.

No community discussion yet for this question.