A developer creates a web application that receives a username and password and uses them to sync the credentials to other services through HTTPS. API keys to services are part of the configuration files of the application, but the credentials to the database that stores the synchronization logs are obtained through an external vault service. What is the security issue in this scenario?

Question

Amar Lojo · Accepted Answer

Communication between the application and the services is not encrypted.

Amar Lojo · Answer

The database credentials should be stored in the configuration files so that they are secured on the same server.

Amar Lojo · Answer

The API keys are stored in the configuration files but should be stored in the vault service.

Amar Lojo · Answer

The synchronization logs should be encrypted and not stored in a relational database.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 200 - 200-901 discussion

Suggested answer: A

0 comments