CAS-005 · Question #474
During a security review for the CI/CD process, a security engineer discovers the following information in a testing repository from the company: Which of the following options is the best…
The correct answer is D. Using a secrets management platform to share and manage confidential information. Using a secrets management platform ensures sensitive information like database credentials is stored securely and not hardcoded in code repositories, preventing accidental exposure during the CI/CD process.
Question
During a security review for the CI/CD process, a security engineer discovers the following information in a testing repository from the company:
Which of the following options is the best countermeasure to prevent this issue in the future?
Exhibits
Options
- APerforming an application penetration test over the testing environment before moving to
- BChanging the repository technology to avoid inclusion of confidential information
- CAutomating the upload process of code to the repository and improving the software development
- DUsing a secrets management platform to share and manage confidential information
How the community answered
(25 responses)- A12% (3)
- B4% (1)
- C4% (1)
- D80% (20)
Explanation
Using a secrets management platform ensures sensitive information like database credentials is stored securely and not hardcoded in code repositories, preventing accidental exposure during the CI/CD process.
Community Discussion
No community discussion yet for this question.