nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #19

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below: You need to refactor this configuration so that the database password is not sto

The correct answer is B. Store the database password inside a Secret object.. Google Kubernetes Engine supports secret to store sensitive data such as database passwords and is a google recommended practice. https://cloud.google.com/kubernetes-engine/docs/concepts/secret

Submitted by asante_acc· Mar 30, 2026Configuring access and security

Question

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below: You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

Exhibit

ASSOCIATE-CLOUD-ENGINEER question #19 exhibit

Options

  • AStore the database password inside the Docker image of the container, not in the YAML file.
  • BStore the database password inside a Secret object.
  • CStore the database password inside a ConfigMap object.
  • DStore the database password in a file inside a Kubernetes persistent volume, and use a persistent

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • C
    4% (1)

Explanation

Google Kubernetes Engine supports secret to store sensitive data such as database passwords and is a google recommended practice. https://cloud.google.com/kubernetes-engine/docs/concepts/secret

Topics

#Kubernetes Secrets#credential management#security best practices#GKE configuration

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice