Valid 200-901 Dumps shared by ExamDiscuss.com for Helping Passing 200-901 Exam! ExamDiscuss.com now offer the newest 200-901 exam dumps, the ExamDiscuss.com 200-901 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 200-901 dumps with Test Engine here:
Refer to the exhibit. An engineer must check the admin rights of users on a database regularly and prepares the Python script to automate the process. The script connects to the database and runs a query. What is a security issue about the secrets in the code that relates to secret protection?
Correct Answer: C
In the provided Python script, database credentials (DB_USER, DB_PWD) are stored in a JSON configuration file (config.json). While it is common to store configuration and credentials in external files, they should always be encrypted to ensure security. * Secret Management: Storing secrets such as database credentials directly in configuration files in plaintext is a security risk. * Encryption: Secrets must be encrypted to protect them from unauthorized access. This can be achieved using various methods such as encrypting the configuration file itself or using secret management tools. * Best Practices: Always ensure that sensitive information like passwords is encrypted when stored, especially in files that might be part of the source code. Option C is the correct answer because it emphasizes the necessity of encrypting secrets if they are stored in the user database or configuration files to prevent unauthorized access. Reference: Cisco DevNet Documentation: Secure Coding Practices