QuestionQ246
Application Deployment and SecurityA developer is designing an application that uses confidential information for a company and its clients. The developer must use different secret-storage techniques for each secret handled to comply with the project's security policy. Drag the security-policy requirements on the left to the storage solutions on the right.
Drag & Drop
environmental variable file
source code file in plain text
external password manager
source code file encrypted
SecretA must be accessible only to the application.
SecretB, which has access control, must be implemented in a secure, per-user fashion.
The development team must have unlimited access to SecretC.
SecretD must be accessible to anyone who has host access.
Community Discussion