Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Cisco 200-901 Exam - Topic 3 Question 107 Discussion

Actual exam question for Cisco's 200-901 exam

Question #: 107
Topic #: 3

[All 200-901 Questions]

Which way should be used to safely the API keys?

AIn an environment variable unique to the system database

BEncrypted in a configuration file that is separate from the code

CEncrypted in the code in a function

DPlain text in the code as a constant

Show Suggested Answer

Suggested Answer: B

API keys should be stored securely to prevent unauthorized access. The best practice is to store them encrypted in a configuration file that is separate from the code. This approach ensures that sensitive information is not hardcoded in the source code, which could be exposed through version control or other means. Keeping API keys in encrypted configuration files also allows for better management and updating of keys without changing the application code.

by Kirby at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium 200-901 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Miles

4 months ago

D is a big no. Plain text is just asking for trouble.

upvoted 0 times

...

Chaya

4 months ago

C is risky. If someone sees the code, they get the keys.

upvoted 0 times

...

Samira

4 months ago

A is good too, but what if the environment gets compromised?

upvoted 0 times

...

Dyan

5 months ago

I think B is the best option. Keeps it secure.

upvoted 0 times

...

Sylvia

5 months ago

I disagree with A, it’s not as secure as B.

upvoted 0 times

...

Lenna

5 months ago

Wait, people still use D? That's wild!

upvoted 0 times

...

Torie

5 months ago

C? Really? That sounds risky.

upvoted 0 times

...

Paulina

5 months ago

A is good too, but B is safer.

upvoted 0 times

...

Mee

5 months ago

B is definitely the best option!

upvoted 0 times

...

Anna

6 months ago

I'm with the crowd on this one. Option B is the way to go. Gotta keep those API keys locked down tight!

upvoted 0 times

...

Jesusa

6 months ago

Option C might work, but it's still not as secure as keeping the keys in an encrypted config file. Better safe than sorry!

upvoted 0 times

...

Lashon

6 months ago

Haha, Option D? Putting API keys in plain text? That's like leaving your house keys under the doormat.

upvoted 0 times

...

Lucy

7 months ago

I agree, Option B is the safest choice. Keeping sensitive data out of the code is a best practice.

upvoted 0 times

...

Aide

7 months ago

Option B is the way to go. Encrypting the API keys in a separate config file is the most secure approach.

upvoted 0 times

...

Maurine

7 months ago

I vaguely recall a practice question where we had to choose between environment variables and encrypted files, but I can't remember which was preferred.

upvoted 0 times

...

Tayna

7 months ago

I feel like encrypting in a separate config file is safer than putting it in the code itself, so B might be the right choice.

upvoted 0 times

...

Elmer

7 months ago

I think using environment variables is a good practice, but I’m not sure if it’s the best option compared to encryption.

upvoted 0 times

...

Shad

7 months ago

I remember we discussed that storing API keys in plain text is a huge security risk, so D is definitely out.

upvoted 0 times

...

Leandro

8 months ago

Option B seems like the safest bet to me. Keeping the API keys separate from the code and encrypting them is a standard security practice. I feel pretty confident that this is the right way to go.

upvoted 0 times

...

Mindy

8 months ago

I'm a bit confused by this question. Storing API keys securely is an important issue, but I'm not sure which of these options is the best. I'll need to do some research on best practices for API key management.

upvoted 0 times

...

Cathrine

8 months ago

D is definitely not the right answer. Storing API keys in plain text is a huge security risk. I'm leaning towards B or C, but I'll need to review the details of each approach.

upvoted 0 times

...

Kristin

8 months ago

Hmm, I'm not sure about this one. I'd need to think more about the tradeoffs between the different options. Encrypting in the code could work, but a separate config file might be better.

upvoted 0 times

...

Colton

8 months ago

I think option B is the best approach here. Encrypting the API keys in a separate configuration file seems like the most secure way to handle sensitive information.

upvoted 0 times

Candida

2 months ago

Option A could work too, but B feels more secure.

upvoted 0 times

...

Daniel

2 months ago

Yeah, keeping it separate from the code is smart.

upvoted 0 times

...

Lajuana

4 months ago

I agree, option B is definitely the safest choice.

upvoted 0 times

...

...