300-745 · Question #30
An employee of a pharmaceutical company accidentally checked in code that contains AWS secret keys to a public GitHub repository, which exposes production resources to attackers. Which mitigation…
The correct answer is D. Configure a SCM precommit hook. An SCM (Source Code Management) precommit hook scans code for sensitive information such as AWS keys before it is committed. This prevents developers from accidentally pushing secrets to public repositories, protecting production resources from exposure.
Question
An employee of a pharmaceutical company accidentally checked in code that contains AWS secret keys to a public GitHub repository, which exposes production resources to attackers. Which mitigation strategy must a security engineer recommend to prevent future reoccurrence?
Options
- AAdd a web application firewall.
- BImplement a more granular port security strategy.
- CImplement a phishing education campaign.
- DConfigure a SCM precommit hook.
How the community answered
(35 responses)- A14% (5)
- B6% (2)
- C6% (2)
- D74% (26)
Explanation
An SCM (Source Code Management) precommit hook scans code for sensitive information such as AWS keys before it is committed. This prevents developers from accidentally pushing secrets to public repositories, protecting production resources from exposure.
Topics
Community Discussion
No community discussion yet for this question.