Machine-translated by Google. Questions are authored in English.
Top

Discussion

Consider the following statements about secrets in application code.
1. A credential committed to a repository must be treated as compromised.
2. Secrets belong in a managed secret store rather than in source.
3. Removing the commit from history makes the credential safe again.

  • A.3 only
  • B.1 only
  • C.All of them
  • D.1 and 2 only

Answer: D

The first two are correct and are standard practice. The third is unsafe, because the credential may already have been read and rewriting history does not reach every clone or cache. Rotation is the only reliable remedy, and the commit removal is merely tidying up.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.