Compare and Contrast Methods to Secure Connections to Providers AT0-001 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   What is the primary purpose of using TLS/SSL when connecting to a cloud provider from an automated pipeline?

   • ATo encrypt data in transit between the pipeline and the provider
   • BTo authenticate the user to the provider
   • CTo compress data to reduce bandwidth usage
   • DTo store data securely at rest
   Reveal Solution Discussion Select an answer first
2. 7foundation · medium

   In an automated delivery pipeline, what is the primary purpose of using IAM roles instead of individual user credentials?

   • ATo provide long-term credentials that never expire
   • BTo bypass multi-factor authentication requirements
   • CTo allow multiple users to share the same password
   • DTo grant permissions to a service or application without embedding long-term credentials
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security auditor is reviewing the IAM policies attached to a CI/CD pipeline's service account. The auditor finds that the service account has a policy that allows 's3:*' on all buckets. What should the engineer do to align with the principle of least privilege?

   • ACreate a new service account with the same policy and use it for the pipeline.
   • BKeep the policy but add a condition that restricts access to certain IP addresses.
   • CUse the root account for the pipeline to avoid policy complexity.
   • DReplace the policy with one that allows only the specific actions needed on the specific buckets used by the pipeline.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   When configuring an SDK for a cloud provider in an automated pipeline, what is the recommended way to handle authentication credentials?

   • AUsing environment variables to pass credentials to the SDK at runtime
   • BStoring credentials in a plain text file within the pipeline workspace
   • CEmbedding the credentials directly in the source code of the application
   • DConfiguring the SDK to use a secrets manager or IAM role to retrieve temporary credentials
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   What is the recommended practice for managing access keys used in automated delivery pipelines?

   • AEmbed access keys in the pipeline configuration file for easy access
   • BShare access keys among team members for convenience
   • CUse the same access key for all environments to simplify management
   • DRotate access keys regularly and store them securely
   Reveal Solution Discussion Select an answer first