7.4 Identify and Describe the Components of Secrets Management CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   What is a key risk of hardcoding secrets in CI/CD pipeline configuration files?

   • ASecrets are automatically rotated
   • BSecrets may be exposed in version control history
   • CSecrets are encrypted at rest
   • DSecrets become too difficult to use
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's application uses a token to authenticate to a third-party service. The token is stored in a configuration file that is readable by all employees. Which change is the most important to reduce the risk of unauthorized use of the token?

   • AChange the token once and inform all employees of the new value.
   • BMove the configuration file to a different directory.
   • CRestrict access to the token using a secrets management service with access policies.
   • DEncrypt the configuration file with a password shared with the team.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a policy that all secrets must be rotated every 90 days. The operations team currently manages secrets manually using spreadsheets. Which tool or practice would best help them comply with the policy?

   • ASet calendar reminders to manually update the spreadsheet every 90 days.
   • BChange the policy to allow rotation every 180 days.
   • CUse a password manager for personal use and share the database password.
   • DImplement a secrets management service with automated rotation capabilities.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Why is it important to rotate application secrets regularly?

   • ATo improve application performance
   • BTo reduce the impact of a compromised secret
   • CTo reduce the need for encryption
   • DTo simplify the codebase
   Reveal Solution Discussion Select an answer first