QuestionQ124

Application Deployment and Security

A developer deploys a SQLite database in a Docker container. Each time a user accesses the database, single-use secret keys are generated. The keys expire after 24 hours.

Where should the keys be stored?

  • A Outside of the Docker container in the source code of applications that connect to the SQLite database.
  • B In a separate file inside the Docker container that runs the SQLite database.
  • C In an encrypted database table within the SQLite database.
  • D In a separate storage volume within the Docker container.
Explanation

A separate storage volume keeps secret keys outside the container image and separate from the SQLite database, so they are not embedded in source code, lost with ephemeral container storage, or co-located in the database they protect. Access controls can be applied to the volume, and expired keys can be removed after their 24-hour validity period.

Community Discussion

No comments yet. Be the first to start the discussion!