Study. uk . com
  1. Home
  2. All questions
  3. Question 218

CompTIA Security+ study material · question 218 of 611

Which two reasons argue against holding a production secret in an environment variable? Choose two.

  1. Environment variables are stored on disk unencrypted by the kernel
  2. Environment variables cannot hold long values
  3. It is visible to the whole process tree
  4. It commonly appears in crash dumps and logs
Show the answer

Answer: C. It is visible to the whole process tree
D. It commonly appears in crash dumps and logs

Exposure through child processes and diagnostic output is why a dedicated secrets store is preferred.

Source: OWASP Secrets Management Cheat Sheet (OWASP) — OWASP Secrets Management Cheat Sheet › Continuous Integration

Challenge yourself on this topic → Study as cards