8. Identify Application Security Issues Related to Secret Protection, Encryption (storage and Transport), and Data Handling 200-901 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A developer commits a Python script to a Git repository that contains a hardcoded API key for a third-party service. The repository is private, but the developer wants to follow security best practices. What should the developer do first?

   • AChange the repository to public so the key is visible to the community
   • BKeep the key in the code but add a comment warning not to share it
   • CEncrypt the repository with a password and share it only with the team
   • DRotate the API key and remove it from the repository history
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A database administrator needs to protect sensitive data in a database that is accessed by multiple applications. The data must be encrypted at rest, but the applications should not be modified. What is the most appropriate solution?

   • AUse a full-disk encryption tool on the database server
   • BEnable Transparent Data Encryption (TDE) on the database
   • CEncrypt the data in the application code before storing it
   • DStore the database on an encrypted network share
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A network automation platform uses a web interface that is accessible over the internet. The platform stores device credentials in a database. Which combination of measures provides the strongest defense-in-depth?

   • AUse HTTPS, encrypt the database at rest, and store credentials in a secrets manager
   • BUse a VPN for all access and store credentials in plaintext
   • CUse a firewall and store credentials in an encrypted file
   • DUse HTTPS and rely on the database's default encryption
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization stores sensitive files in an on-premises file server. The files must be encrypted at rest, and the encryption keys must be managed separately from the data. What is the best solution?

   • AUse a hardware security module (HSM) to store the encryption keys
   • BStore the encryption keys in the same folder as the encrypted files
   • CEncrypt the files with a key derived from the file name
   • DUse a simple password to encrypt the files
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of using TLS/SSL for communication between a web application and its users?

   • ATo prevent users from accessing the application without a password.
   • BTo encrypt data in transit, protecting it from eavesdropping and tampering.
   • CTo store data securely on the server's hard drive.
   • DTo speed up the transmission of data between client and server.
   Reveal Solution Discussion Select an answer first