A Recent Security Audit Identified That a Company's Application Team

question 153

Multiple Choice

A recent security audit identified that a company's application team injects database credentials into the environment variables of an AWS Fargate task. The company's security policy mandates that all sensitive data be encrypted at rest and in transit. Which combination of actions should the security team take to make the application compliant with the security policy?

• A) Store the credentials securely in a file in an Amazon S3 bucket with restricted access to the application team IAM role. Ask the application team to read the credentials from the S3 object instead.
• B) Create an AWS Secrets Manager secret and specify the key/value pairs to be stored in this secret.
• C) Modify the application to pull credentials from the AWS Secrets Manager secret instead of the environment variables.
• D) Add the following statement to the container instance IAM role policy:
• E) Add the following statement to the task execution role policy

---

Definitions:

Discount Method

A financial strategy where the interest and financing charges are calculated at the time of the sale and deducted from the principal before the loan is disbursed.

Actual Interest Rate

The real rate of interest earned or paid on an investment, loan, or savings, taking into account compounding and fees.

Cash Discounts

Reductions in the price of goods or services, offered to customers as an incentive for early payment.

Discount Method

The discount method is a way of understanding the value of money received in the future as being less valuable than money held today, often used in calculating the present value of future cash flows.