Cisco Exam 300-735 Topic 2 Question 55 Discussion

Actual exam question for Cisco's 300-735 exam

Question #: 55
Topic #: 2

A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority.

Which approach must be taken to secure API keys and passwords?

AEmbed them directly in the code.

BStore them in a hidden file.

CStore them inside the source tree of the application.

DChange them periodically.

Show Suggested Answer

Suggested Answer: D

by Mozell at Mar 10, 2024, 09:24 AM

Limited Time Offer

25%

Off

Get Premium 300-735 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Anastacia

6 months ago

Changing the keys and passwords periodically can also add an extra layer of security.

upvoted 0 times

...

Stephanie

6 months ago

I agree with Elza. Storing them directly in the code is risky.

upvoted 0 times

...

Elza

6 months ago

I think we should store them in a hidden file to prevent unauthorized access.

upvoted 0 times

...

Jordan

7 months ago

We just completed configuring the API. How should we secure API keys and passwords?

upvoted 0 times

...

Adell

7 months ago

Changing them periodically is also a good idea to enhance security. It prevents unauthorized access even if they are discovered.

upvoted 0 times

...

Carrol

7 months ago

I agree with Tracie. Storing them directly in the code seems risky.

upvoted 0 times

...

Tracie

7 months ago

I think storing them in a hidden file would be the best approach. It keeps them secure and hidden from prying eyes.

upvoted 0 times

...

Carlene

7 months ago

We just finished configuring the API for sensitive data. How should we secure the API keys and passwords?

upvoted 0 times

...

Barrett

8 months ago

Storing them in a hidden file or inside the source tree isn't much better. Those are just security through obscurity, which we all know is not real security.

upvoted 0 times

...

Dulce

8 months ago

Haha, yeah, might as well just post the credentials on a billboard for everyone to see. I'd be surprised if anyone even considers that one.

upvoted 0 times

...

Diego

8 months ago

I agree, option A is just asking to get hacked. That's like putting a 'Steal Me' sign on your front door.

upvoted 0 times

...

Dorthy

8 months ago

Seriously? Embedding sensitive information like API keys and passwords directly in the code? That's a huge security risk! I can't believe that's even an option on the exam.

upvoted 0 times

Tayna

8 months ago

Definitely not D. Changing them periodically is important but not the initial step to secure them.

upvoted 0 times

...

Novella

8 months ago

Storing them inside the source tree of the application doesn't seem secure either.

upvoted 0 times

...

Janna

8 months ago

Agreed. It's important to protect sensitive information like API keys and passwords.

upvoted 0 times

...

Ludivina

8 months ago

I agree, that's a major security risk. Storing them in a hidden file seems like a better option.

upvoted 0 times

...

Margurite

8 months ago

Definitely not A. We should never embed API keys and passwords directly in the code.

upvoted 0 times

...