Question

An engineer needs to review and clean up a code repository. During the review, the engineer discovers a file named `config.json` containing API URLs, shared keys, and other application configuration settings. Which two best-practice methods must be used to protect secrets? (Choose two.)

Accepted Answer

C. Never appear in plaintext at rest or in transit.; E. Always store in a secure vault.

Answer

Store in plaintext if they are not stored in a code repository.

Answer

Store as plaintext when the server is secured physically.

Answer

Make them long, secure strings that include numbers with special characters.