7.4 Identify and Describe the Components of Secrets Management CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company's CI/CD pipeline runs automated tests that require access to a production-like database. The database credentials are stored in a secrets manager. The team wants to ensure that the credentials are not exposed in pipeline logs. Which practice is the most effective?

   • AStore the credentials in a file in the workspace and delete it after the test.
   • BUse the credentials in the pipeline script without any masking.
   • CPrint the credentials to the console for debugging purposes.
   • DInject the credentials as environment variables and configure the pipeline to mask secret values in logs.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A DevOps team is building a CI/CD pipeline that deploys a web application to production. The pipeline needs to access a production database password during the deployment stage. Which practice is the most secure way to provide the password to the pipeline?

   • AStore the password in a plain-text file in the build repository.
   • BHardcode the password in the pipeline script.
   • CInject the password from a secrets management service at deployment time.
   • DPass the password as a command-line argument in the pipeline definition.
   Reveal Solution Discussion Select an answer first
4. 18application · medium · select all that apply

   A company wants to improve its secrets management practices. Which of the following are considered best practices for protecting application secrets? (Select all that apply.)

   • AEmbed secrets in source code for easy version control.
   • BStore secrets in a dedicated secrets management service.
   • CRotate secrets regularly.
   • DShare secrets with all team members to ensure availability.
   • ERestrict access to secrets based on the principle of least privilege.
   Check answers Discussion Select an answer first
5. 19foundation · easy

   Which type of secret is commonly used to establish a secure, encrypted connection between an application and a remote server?

   • ASSH key
   • BOAuth token
   • CDatabase password
   • DAPI key
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A mobile application uses an API key to access a backend service. The key is currently embedded in the app binary. Which change would most improve the security of the API key?

   • AObfuscate the API key in the app binary using string encryption.
   • BRely on the app store's security to protect the key.
   • CUse a different API key for each app version and embed them all in the binary.
   • DMove the API key to a backend proxy that the mobile app calls, and store the key in a secrets manager.
   Reveal Solution Discussion Select an answer first