A multinational company must comply with data residency regulations that require secrets to be stored within specific geographic boundaries. They are using a cloud secret manager that offers regional endpoints. The application is deployed in multiple regions. What is the best way to ensure compliance?

Store all secrets in a single region that is compliant and have applications in other regions access them over the network.

Use a global secret manager that replicates secrets across all regions.

Use a separate secret manager instance in each region and store only the secrets required for that region.

Store secrets in a configuration file on the application server in each region.

A security audit reveals that a team has been storing secrets in environment variables in a CI/CD pipeline. The audit requires that secrets be encrypted at rest and that access be logged. The team uses a self-hosted CI/CD server. Which action best addresses the audit findings?

Continue using environment variables but encrypt the CI/CD server's disk.

Use a cloud secret manager and retrieve secrets at runtime in the pipeline.

Store the secrets in a configuration file in the repository and use a pre-commit hook to encrypt it.

Move the secrets to a dedicated secrets management tool and integrate it with the CI/CD pipeline.

CiscoCertified DevNet Professional

Domain 4Objective 8

Identify the Secret Storage Approach Relevant to a Given Scenario 350-901 Practice Questions (Page 1)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 13 practice questions to prepare you well beyond it. (estimate)

13questions here

3free pages

3concepts

20%of the exam

Questions 1–5

1foundation · easy
A small application is deployed on a single server and needs to store an API key. The key rarely changes and the application is not part of a larger microservices architecture. Which secret storage approach is most appropriate for this scenario?
Select an answer first
2expert · medium
A multinational company must comply with data residency regulations that require secrets to be stored within specific geographic boundaries. They are using a cloud secret manager that offers regional endpoints. The application is deployed in multiple regions. What is the best way to ensure compliance?
Select an answer first
3foundation · easy
A company has a microservices architecture running on Kubernetes and needs to manage secrets across multiple services with fine-grained access control and audit logging. Which secret storage approach is most appropriate?
Select an answer first
4foundation · easy
Which approach is a common secret storage method that involves storing secrets directly in the application's runtime environment?
Select an answer first
5expert · medium
A security audit reveals that a team has been storing secrets in environment variables in a CI/CD pipeline. The audit requires that secrets be encrypted at rest and that access be logged. The team uses a self-hosted CI/CD server. Which action best addresses the audit findings?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.

Identify the Secret Storage Approach Relevant to a Given Scenario 350-901 Practice Questions (Page 1)

Questions 1–5

A small application is deployed on a single server and needs to store an API key. The key rarely changes and the application is not part of a larger microservices architecture. Which secret storage approach is most appropriate for this scenario?

A company has a microservices architecture running on Kubernetes and needs to manage secrets across multiple services with fine-grained access control and audit logging. Which secret storage approach is most appropriate?

Which approach is a common secret storage method that involves storing secrets directly in the application's runtime environment?

A security audit reveals that a team has been storing secrets in environment variables in a CI/CD pipeline. The audit requires that secrets be encrypted at rest and that access be logged. The team uses a self-hosted CI/CD server. Which action best addresses the audit findings?

Keep studying — 4.0 Application Deployment and Security