7.4 Identify and Describe the Components of Secrets Management CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of an application secret used to authenticate an application to an external service?

   • AAPI key
   • BUsername
   • CPublic certificate
   • DDatabase schema
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security auditor discovers that a company's application stores SSH private keys in a world-readable directory on the application server. Which immediate action should the administrator take to mitigate the risk?

   • AChange the file permissions to 644 so the owner can read and write.
   • BCopy the keys to a backup server and delete the original.
   • CMove the keys to a secrets management service and restrict access to the application service account.
   • DRename the directory to something less obvious.
   Reveal Solution Discussion Select an answer first
4. 3application · medium · select all that apply

   A developer is writing code that needs to authenticate to a third-party API. Which of the following are common types of application secrets that could be used? (Select all that apply.)

   • AAPI key
   • BAccess token
   • CPublic encryption key
   • DSSH private key
   • EDatabase password
   Check answers Discussion Select an answer first
5. 4application · medium

   An application needs to authenticate to an external service using a token that expires every 24 hours. The application runs on a virtual machine and must automatically obtain a new token when the current one expires. Which solution is the most appropriate?

   • AUse a secrets management service to store the token and configure the application to retrieve it before each authentication call.
   • BEmbed the token in the application binary and recompile daily.
   • CStore the token in a shared network drive and have the application read it from there.
   • DHardcode the token in the application configuration file and update it manually every day.
   Reveal Solution Discussion Select an answer first
6. 5application · medium · select all that apply

   A DevOps team is configuring a CI/CD pipeline and wants to handle secrets securely. Which of the following are appropriate ways to manage secrets in a CI/CD pipeline? (Select all that apply.)

   • APrint secrets to the console for debugging.
   • BStore secrets in the pipeline's source code repository.
   • CInject secrets from a secrets management service at build time.
   • DEnable log masking for secret values in pipeline output.
   • EUse environment variables to pass secrets to pipeline jobs.
   Check answers Discussion Select an answer first