Your Application Artifacts Are Being Built and Deployed Via a CI/CD

question 15

Multiple Choice

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?

• A) Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
• B) Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
• C) Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
• D) Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it.

---

Definitions:

Negligence

Not acting with the care expected from a reasonably prudent person in identical situations.

Cattle Feed

Food specifically prepared and provided for the nourishment and growth of cattle.

Poisoned Feed

A harmful or toxic compound mixed with livestock feed that can damage or kill animals.

Strict Liability

Legal responsibility for damages or injury, regardless of the presence of fault or negligence.