Valid 200-901 Dumps shared by ExamDiscuss.com for Helping Passing 200-901 Exam! ExamDiscuss.com now offer the newest 200-901 exam dumps, the ExamDiscuss.com 200-901 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 200-901 dumps with Test Engine here:
Refer to the exhibit. A developer is part of a team that is working on an open-source project in which source code is hosted in a public GitHub repository. While the application was built, security concerns were addressed by encrypting the credentials on the server. After a few months, the developer realized that a hacker managed to gain access to the account. The exhibit contains part of the source code for the login process. Why was the attacker able to access the developer's account?
Correct Answer: A
The exhibit shows that the credentials are base64 encoded and included in the source code. Base64 encoding is not a secure method of protecting credentials as it can be easily decoded. Therefore, an attacker who gains access to the source code can decode the credentials and gain unauthorized access to the account. Proper security practices should involve storing credentials securely, such as using environment variables or secure vaults, and not hardcoding them in the source code. References: * OWASP - Storing Passwords Securely * Cisco DevNet Associate Certification Guide