8. Identify Application Security Issues Related to Secret Protection, Encryption (storage and Transport), and Data Handling 200-901 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A network automation script sends REST API requests to a controller over HTTP. The script includes a service account password in the request header. What is the most important security issue in this scenario?

   • AThe password is not hashed before being placed in the header
   • BThe password is transmitted in plaintext because HTTP is unencrypted
   • CThe password is not encrypted at rest in the script file
   • DThe script uses a service account instead of a personal account
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company runs a web application behind a load balancer. The load balancer terminates TLS and forwards traffic to backend servers over HTTP. The security team wants to ensure that sensitive data is encrypted end-to-end, but the backend servers do not have certificates installed. What is the best option?

   • AUse a VPN between the load balancer and backend servers.
   • BKeep HTTP on the backend because the data is already encrypted on the public leg.
   • CUse a self-signed certificate on the load balancer for the backend connection.
   • DInstall certificates on the backend servers and enable TLS between the load balancer and backend.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which practice is most appropriate for securely disposing of a hard drive that contained customer personal data?

   • ADeleting the files and emptying the recycle bin.
   • BReformatting the drive with a quick format.
   • CMoving the drive to a different computer.
   • DDegaussing or physically destroying the drive.
   Reveal Solution Discussion Select an answer first
5. 29application · easy

   A company is decommissioning an old server that contains customer data. The data is no longer needed. What is the most secure disposal method?

   • ADelete the files and empty the recycle bin
   • BReformat the hard drives and reinstall the operating system
   • CDegauss the hard drives and physically destroy them
   • DMove the data to a backup tape and store it
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A developer needs to store an API token for a third-party service that the application uses at runtime. The token must be available to the application but must not be exposed to other developers who have access to the source code repository. Which approach is most appropriate?

   • AStore the token in a secrets management service and retrieve it at runtime.
   • BEncrypt the token with a key stored in the same repository.
   • CCommit the token to a file that is excluded from the repository.
   • DHard-code the token in the application code and restrict repository access.
   Reveal Solution Discussion Select an answer first