PROFESSIONAL-CLOUD-DEVELOPER · Question #352
You are responsible for managing the security of internal applications in your company. The applications are deployed on Cloud Run, and use Secret Manager to store passwords needed to access internal
The correct answer is C. Store the new password in the secret. Reference the latest version of any secret required, and. By storing the new password in the secret and referencing the latest version, the application can automatically pick up the updated secret without requiring any code changes or redeployments. Since the application caches the secret for 15 minutes, it will retrieve the new passwor
Question
You are responsible for managing the security of internal applications in your company. The applications are deployed on Cloud Run, and use Secret Manager to store passwords needed to access internal databases. Each application can cache secrets for up to 15 minutes. You need to determine how to rotate the secrets. You want to avoid application downtime. What should you do?
Options
- AStore the new username and password in the secret. Reference the latest version of any secret
- BDesign the applications to retrieve the Latest secret payload on application startup, and continue
- CStore the new password in the secret. Reference the latest version of any secret required, and
- DStore the new password in the secret. Design the applications to reference a specific secret
How the community answered
(40 responses)- A5% (2)
- B15% (6)
- C75% (30)
- D5% (2)
Explanation
By storing the new password in the secret and referencing the latest version, the application can automatically pick up the updated secret without requiring any code changes or redeployments. Since the application caches the secret for 15 minutes, it will retrieve the new password when the cache expires, ensuring a seamless rotation process. This approach avoids downtime and keeps the secret rotation process secure and efficient.
Topics
Community Discussion
No community discussion yet for this question.