8. Identify Application Security Issues Related to Secret Protection, Encryption (storage and Transport), and Data Handling 200-901 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common risk associated with embedding a database password directly in a configuration file that is stored in a source code repository?

   • AThe password will be encrypted automatically by the version control system.
   • BThe password will be visible only to the repository administrator.
   • CThe password may be exposed to anyone with read access to the repository.
   • DThe password will automatically expire after a short period.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network engineer is configuring a new API gateway that will proxy requests to internal microservices. The security team requires that all traffic between clients and the gateway be encrypted. Which configuration satisfies this requirement?

   • ATerminate TLS at the gateway and use plain HTTP between the gateway and internal services.
   • BUse a VPN between the client and the gateway instead of TLS.
   • CEnable TLS on the gateway's public listener and also enable TLS between the gateway and internal services.
   • DPlace the gateway on a private network and rely on network segmentation.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A developer needs to store a database password for an application that runs on a virtual machine. The password should be protected at rest and not appear in the application's configuration file. What is the best approach?

   • APut the password in an environment variable
   • BStore the password in a secrets manager and retrieve it at runtime
   • CHardcode the password in the application source code
   • DEncrypt the configuration file with a static key
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is decommissioning an old server that contains customer data. The server will be returned to the hardware vendor. Which procedure best ensures the data is not recoverable?

   • APerform a secure wipe that overwrites the entire disk, then physically destroy the drive.
   • BDelete the customer data files and empty the recycle bin.
   • CReformat the disk with a quick format.
   • DRemove the customer data files and rely on the vendor's data destruction policy.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When a database contains sensitive customer data, which encryption approach provides the most granular protection by encrypting only the sensitive fields?

   • ASecure Sockets Layer (SSL)
   • BColumn-level encryption
   • CFull-disk encryption
   • DTransparent data encryption (TDE)
   Reveal Solution Discussion Select an answer first