You are setting up registry credentials for Falcon Cloud Security to assess images from an approved registry. What is the best practice to follow when managing these credentials?

Question

Options

• AStore the credentials in plain text within the configuration file.
• BShare the credentials across multiple teams for ease of use.
• CUse default admin credentials for simplicity during setup.
• DUse a service account with minimal permissions to generate the credentials.

• A
  3% (1)
• B
  3% (1)
• C
  5% (2)
• D
  89% (34)

Explanation

Option A: Storing credentials in plain text poses a significant security risk. Credentials should always be encrypted or securely stored using tools like AWS Secrets Manager or HashiCorp Option B: Sharing credentials across multiple teams violates the principle of least privilege and increases the risk of unauthorized access. Option C: Using default admin credentials is highly insecure and can lead to unauthorized access if the credentials are compromised. Option D: Best practices recommend using a service account with the least privilege necessary to reduce the risk of over-privileged access in case of a breach. This ensures security while granting Falcon Cloud Security access for image assessments.

No community discussion yet for this question.