Identify the Secret Storage Approach Relevant to a Given Scenario 350-901 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A developer is writing a script that needs to authenticate to a REST API. The script is run manually by the developer on their local machine. Which approach is most appropriate for storing the API token?

   • AUse a cloud secret manager to store the token.
   • BStore the token in a plaintext file in the project directory.
   • CUse an environment variable set in the developer's shell profile.
   • DHardcode the token in the script.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which secret storage approach is a centralized system that provides dynamic secrets, leasing, and revocation?

   • AConfiguration files
   • BCloud secret managers
   • CEnvironment variables
   • DVault services
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is deploying a mobile application backend. The backend needs to store a push notification API key. The key is used by multiple microservices. The team wants a solution that is easy to manage and provides centralized access control. Which approach is most appropriate?

   • AUse a central secrets manager and have each microservice retrieve the key.
   • BStore the key in each microservice's environment variables.
   • CStore the key in a configuration file that is shared across microservices.
   • DEmbed the key in the mobile application code.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A team is using a secrets manager to store database credentials. They want to ensure that if a database credential is compromised, the impact is minimized. Which practice is most effective?

   • AUse a long-lived credential that is rarely rotated.
   • BUse the same credential for all databases to simplify management.
   • CUse unique credentials for each database and rotate them regularly.
   • DStore the credentials in a configuration file with restricted permissions.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A development team is building a CI/CD pipeline. They need to store a service account key that is used to authenticate to a cloud API. The key is long-lived and rarely changes. The team wants a simple solution that is easy to manage and does not require additional infrastructure. Which approach is most appropriate?

   • AStore the key as a secret in the CI/CD platform's built-in secret store.
   • BEmbed the key directly in the pipeline script.
   • CStore the key in a configuration file in the repository and reference it in the pipeline.
   • DUse a dedicated vault service to store the key and retrieve it in the pipeline.
   Reveal Solution Discussion Select an answer first