A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority.
Which approach must be taken to secure API keys and passwords?
Suggested Answer: D
Get Premium 350-901 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
2 comments · newest first
ST
Starr
1 day ago
I think we practiced a similar question where storing keys in the source tree was considered insecure. I’m leaning towards changing them periodically.
LY
Lynette
7 days ago
I remember discussing how embedding keys directly in the code is a big no-no, but I’m not sure about the hidden file option.