1.3 Manage API Keys CCFA Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   An administrator suspects that an API key has been compromised because it was found in a public code repository. The key is used by a nightly backup script. What is the most immediate action the administrator should take?

   • AMonitor the API key for unusual activity before taking action.
   • BRevoke the compromised API key immediately.
   • CRotate the API key and update the backup script.
   • DChange the permissions on the API key to read-only.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   After an administrator creates a new API key in the Falcon console, where is the full API key secret displayed?

   • AIn the audit log, as part of the creation event
   • BIn the API key management page, visible at any time after creation
   • COnly once, immediately after creation, and it cannot be viewed again
   • DIn the user's profile settings, under 'API Credentials'
   Reveal Solution Discussion Select an answer first