200-901 · Question #608
An engineer must review and clean up a code repository. During the review, the engineer finds a file named config.json that contains API URLs, shared keys, and other application configurations…
The correct answer is C. Never appear in plaintext at rest or in transit. E. Always store in a secure vault. To protect secrets such as API URLs, shared keys, and other application configurations, it is best practice to: C. Ensure they never appear in plaintext at rest or in transit. Encrypt sensitive data both when it is stored (at rest) and when it is transmitted over the network…
Question
An engineer must review and clean up a code repository. During the review, the engineer finds a file named config.json that contains API URLs, shared keys, and other application configurations. Which two methods, according to best practice, must be used to protect secrets? (Choose two.)
Options
- AStore in plaintext if they are not stored in a code repository.
- BStore as plaintext when the server is secured physically.
- CNever appear in plaintext at rest or in transit.
- DMake them long, secure strings that include numbers with special characters.
- EAlways store in a secure vault.
How the community answered
(27 responses)- A15% (4)
- B4% (1)
- C74% (20)
- D7% (2)
Explanation
To protect secrets such as API URLs, shared keys, and other application configurations, it is best practice to: C. Ensure they never appear in plaintext at rest or in transit. Encrypt sensitive data both when it is stored (at rest) and when it is transmitted over the network (in transit). This prevents unauthorized access and exposure. E. Always store secrets in a secure vault. Use dedicated secret management tools like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault to store and manage sensitive information securely. These tools provide mechanisms for access control, audit logging, and automatic rotation of secrets.
Topics
Community Discussion
No community discussion yet for this question.