350-901 AUTOCOR: Designing, Deploying, and Managing Network Automation SystemsDemo

By Cisco · Question Mode

QuestionQ377

Infrastructure and Automation

A developer must implement an infrastructure pipeline within the organization. To do so, the developer must identify the methods required to store and work with credentials such as API keys, usernames, and passwords. Which two methods must be used?

Choose two
  • A Store the secrets in a vars file, and encrypt and store in a version control system.
  • B Use SHA-1 hashing and store in a version control system.
  • C Inject the secrets into the pipeline at runtime.
  • D Implement a secret store, such as Vault.
  • E Store the secrets in a text file on your local machine.
Explanation

A dedicated secret store centralizes and protects sensitive credentials with controlled access, encryption, auditing, and rotation capabilities. Secrets should be injected only when the pipeline runs so they are available to the required job without being embedded in source-controlled files or stored locally. HashiCorp Vault documents API keys and passwords as secrets requiring tightly controlled access, while GitHub Actions documents injecting stored secrets into a workflow runtime.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!