QuestionQ246

Application Deployment and Security

A developer is designing an application that uses confidential information for a company and its clients. The developer must use different secret-storage techniques for each secret handled to comply with the project's security policy. Drag the security-policy requirements on the left to the storage solutions on the right.

Drag & Drop
environmental variable file
source code file in plain text
external password manager
source code file encrypted
SecretA must be accessible only to the application.
SecretB, which has access control, must be implemented in a secure, per-user fashion.
The development team must have unlimited access to SecretC.
SecretD must be accessible to anyone who has host access.
Explanation

An encrypted source file limits usable access to the application that holds the decryption capability. An external password manager supports authenticated, individual access control. Plain-text source code is directly available to developers with repository access, while environment-variable files are accessible to users who can access the host.

Community Discussion

No comments yet. Be the first to start the discussion!