7.4 Identify and Describe the Components of Secrets Management CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which practice is essential for securely storing application secrets?

   • AUsing a dedicated secrets management solution
   • BStoring them in plain text configuration files
   • CSharing them via email to team members
   • DHardcoding them in the source code
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security incident reveals that an attacker exfiltrated a database password from a developer's laptop. The password is used by multiple applications. Which action should be taken first to minimize the impact?

   • ARotate the database password immediately and update all applications that use it.
   • BDisconnect the developer's laptop from the network.
   • CChange the developer's account password.
   • DMonitor the database logs for suspicious activity.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A development team uses a CI/CD pipeline to build and test an application. During the test stage, the pipeline needs to access a test database that requires credentials. Which approach is the most secure way to handle these credentials?

   • AUse a secrets management service to inject the test credentials into the pipeline environment variables.
   • BStore the test credentials in the pipeline configuration file.
   • CUse the production credentials for the test database to avoid managing multiple secrets.
   • DAsk developers to manually enter the credentials each time the pipeline runs.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An application needs to authenticate to a cloud provider's API using a service account key. The key is currently stored in a configuration file on the application server. Which improvement is most important?

   • AUse the same service account key for all applications to simplify management.
   • BChange the file extension to .txt so it is not recognized as a configuration file.
   • CStore the key in a secrets management service and retrieve it at runtime.
   • DEncrypt the configuration file with a password known to the operations team.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A startup uses a single database password for all application instances and stores it in a shared spreadsheet. After a security audit, they must reduce the risk of a data breach if the password is leaked. Which action is the most effective first step?

   • ARotate the password regularly and store it in a secrets management service.
   • BChange the password once and share the new one via email to all developers.
   • CEncrypt the spreadsheet with a password known to the team.
   • DUse the same password for all services to simplify management.
   Reveal Solution Discussion Select an answer first