Google
PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #159
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of
Sign in or unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER to reveal the answer and full explanation for question #159. The question stem and answer options stay visible for context.
Submitted by ashley.k· Apr 18, 2026Building and implementing CI/CD pipelines for a service
Question
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?
Options
- APrompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- BStore secrets in a separate configuration file on Git. Provide select developers with access to the
- CStore secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline
- DEncrypt the secrets and store them in the source code repository. Store a decryption key in a
Unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#CI/CD#Secrets Management#Cloud KMS#Security Best Practices