Which of the following tasks can be performed by a security team as a proactive measure to help address secret scanning alerts? Each answer presents a complete solution. (Choose two.)

Question

Options

• AEnable system for cross-domain identity management (SCIM) provisioning for the enterprise.
• BDocument alternatives to storing secrets in the source code.
• CDismiss alerts that are older than 90 days.
• DConfigure a webhook to monitor for secret scanning alert events.

• A
  12% (4)
• B
  82% (27)
• C
  6% (2)

Explanation

[D] Integrate Secret Scanning into the Development Lifecycle: *-> Pre-commit hooks: Implement pre-commit hooks in version control systems to scan code for secrets before they are [B] Implement a Comprehensive Secret Scanning Policy: Define Secrets: Clearly define what constitutes a secret within your organization. Scanning Scope: Specify which environments and repositories need to be scanned and how Roles and Responsibilities: Define roles and responsibilities for managing secret scanning and [A] You can manage the lifecycle of your enterprise's user accounts from your identity provider (IdP) using System for Cross-domain Identity Management (SCIM).

No community discussion yet for this question.