CLOUDSEC-PRO: Palo Alto Networks Certified Cloud Security ProfessionalDemo

By Palo Alto Networks · Question Mode

QuestionQ16

Application Security

An administrator finds that certain text files in the company GitHub repository are not scanned for secrets. Further inspection shows that the unscanned files were encrypted with AES-256.

What action is required to ensure the files are scanned for secrets?

  • A Connect the key management service as a data source.
  • B Upload the decrypting certificate to the portal.
  • C Decrypt the non-scanned files back to plaintext.
  • D Upload the PGP private key to GitHub.
Explanation

GitHub secret scanning scans repository contents for supported secret patterns. AES-256-encrypted ciphertext does not contain the plaintext secret patterns that the scanner must inspect, so the files must be decrypted back to plaintext before they can be scanned.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!