A developer is about to commit code to a shared repository. Which practice is most important to prevent exposure of API keys and passwords?

Store secrets in environment variables or a dedicated secrets manager and reference them in code.

Encrypt the code repository with a strong passphrase before pushing.

Add the secrets to the README file so all developers know where to find them.

Use a complex password in the code and change it frequently.

A company's application processes credit card numbers. The company wants to reduce the risk of data breaches. Which practice is most aligned with data minimization?

Encrypt the full card number in the database

Use a third-party payment processor that handles the card data

Keep the full card number in memory only during processing

Store only the last four digits of the card number and a token

Which method is used to encrypt an entire storage volume so that all data written to it is automatically protected?

Column-level encryption in a database

File-level encryption using a tool like GPG

A network engineer is configuring a webhook that sends device alerts to an external monitoring service. The webhook URL includes a shared secret as a query parameter. What is the main security concern?

The secret is not encrypted at rest

The webhook uses HTTPS, so the secret is safe

The secret is exposed in the URL, which may be logged by proxies and servers

The webhook is not using a certificate

An application stores credit card numbers in a database. The security policy requires that the data be unreadable if the database file is copied, but the application must still be able to process transactions. Which approach best meets the requirement?

Hash the credit card numbers and store only the hash.

Use application-level encryption and decrypt only when processing a transaction.

Store the credit card numbers in a separate table with restricted access.

Use a database view that masks the numbers for most users.

CiscoCertified Network Associate Automation (CCNA Automation)

Domain 4Objective 8

8. Identify Application Security Issues Related to Secret Protection, Encryption (storage and Transport), and Data Handling 200-901 Practice Questions (Page 7)

Part of the 4.0 Application Deployment and Security domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

4concepts

15%of the exam

Questions 31–35

31foundation · easy
A developer is about to commit code to a shared repository. Which practice is most important to prevent exposure of API keys and passwords?
Select an answer first
32application · medium
A company's application processes credit card numbers. The company wants to reduce the risk of data breaches. Which practice is most aligned with data minimization?
Select an answer first
33foundation · easy
Which method is used to encrypt an entire storage volume so that all data written to it is automatically protected?
Select an answer first
34application · medium
A network engineer is configuring a webhook that sends device alerts to an external monitoring service. The webhook URL includes a shared secret as a query parameter. What is the main security concern?
Select an answer first
35application · medium
An application stores credit card numbers in a database. The security policy requires that the data be unreadable if the database file is copied, but the application must still be able to process transactions. Which approach best meets the requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.