MENU
A potential threat was discovered during vulnerability testing when an environment configuration file was found that contained the database username and password stored in plain text.
How should existing security controls be adjusted to prevent this in the future?
Suggested Answer: B
Get Premium Secure Software Design (D487) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
DE
Deeanna
1 month ago
A strong password policy is important too, but B covers more.
JE
Jeannine
1 month ago
I agree, Carmelina. Storing passwords in plain text is risky.
CA
Carmelina
1 month ago
I think B is the best choice. Encrypting secrets is crucial.
CA
Casey
2 months ago
Role-Based Authorization helps, but encryption is key here.
LE
Lewis
2 months ago
Wait, people still store passwords in plain text? That's wild!
BR
Brigette
2 months ago
Strong password policies are important too, but not enough.
LO
Lourdes
2 months ago
Agree, plain text passwords are a big no-no.
BR
Brynn
2 months ago
Definitely need to encrypt secrets!
NA
Nadine
2 months ago
I’m a bit confused about the role of user input validation in this context. It seems more related to preventing injection attacks than securing configuration files.
CA
Casie
3 months ago
This reminds me of a practice question we did about securing credentials. I think encrypting secrets is definitely the best approach, so B again.
BA
Barb
3 months ago
I'm not entirely sure, but I feel like strong password policies could help too. Maybe option C is relevant?
AN
Anthony
3 months ago
I remember discussing the importance of encrypting sensitive data during our last class. I think option B makes the most sense here.