GH-200 · Question #22
As a developer, you need to use GitHub Actions to deploy a microservice that requires runtime access to a secure token. This token is used by a variety of other microservices managed by different team
Sign in or unlock GH-200 to reveal the answer and full explanation for question #22. The question stem and answer options stay visible for context.
Question
As a developer, you need to use GitHub Actions to deploy a microservice that requires runtime access to a secure token. This token is used by a variety of other microservices managed by different teams in different repos. To minimize management overhead and ensure the token is secure, which mechanisms should you use to store and access the token? (Each correct answer presents a complete solution. Choose two.)
Options
- AStore the token as a GitHub encrypted secret in the same repo as the code. During deployment,
- BUse a corporate non-GitHub secret store (e.g., HashiCorp Vault) to store the token. During
- CStore the token as an organizational-level encrypted secret in GitHub. During deployment, use
- DStore the token as a GitHub encrypted secret in the same repo as the code. Create a reusable
- EStore the token in a configuration file in a private repository. Use GitHub Actions to deploy the
Unlock GH-200 to see the answer
You've previewed enough free GH-200 questions. Unlock GH-200 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.