300-910 practice question 24 of 25
A security team is running vulnerability scans against a CI/CD pipeline. The reports show that RDBMS secrets were found hardcoded in Ansible scripts. The RDBMS resides in the internal network but is accessible from a jump server that resides in a public network. If an attacker gains access to the scripts, what is the risk exposure?
Full set: 129 questionsThe internal network is at risk of being compromised if an attacker gains access to the Ansible scripts, as the scripts contain hardcoded secrets for the RDBMS which is accessible from a jump server in a public network. This presents a risk as the secrets can be used to gain access to the RDBMS, and from there, the attacker could potentially gain access to the internal network. Additionally, the entire CI/CD-related infrastructure could be at risk if the attacker is able to gain access to the RDBMS, as they could potentially manipulate the data or scripts in order to cause disruption or damage.
Keep practicing
Take the free 300-910 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 300-910 practice questions
- Question 2An application for storing and categorizing has been developed. The application uses dual…
- Question 3Which two elements help to secure your API keys? (Choose two.)
- Question 4How does eliminating hardcoded or default passwords help to secure an environment?
- Question 6What are two testing scenarios of the chaos engineering principle? (Choose two.)
- Question 7How long analysis systems such as Elasticsearch, Logstash, and Kibana Stack handle ingest…
- Question 8A developer wants to deploy a highly available web server cluster and decides to put a lo…
