Secrets and Supply Chain

1. What is the first step to take when a secret is leaked into a git repository?

Assess exposure immediately Clean the git history Revoke or rotate the credential Delete the commit and move on

2. Which of the following is the appropriate way to store secrets in a deployed environment?

User-secrets Hardcode in appsettings.json Azure Key Vault Environment variables

3. What practice should be followed to prevent recurrence of secret leaks into version control?

Delete the commit Implement pre-commit scanning Store different secrets per environment Ignore the issue if it's a private repo

4. What is the significance of using managed identity for SQL Server authentication?

It allows for easier password management It removes the need for storing passwords entirely It makes connections faster It simplifies user permissions

Continue: How Would You Add AI to Our App? → Review this lesson Retake quiz