Question 231 · 530 in bank
A developer is developing a web application that uses username and password to authenticate to the next service. The user credentials must be available at any time in the application. The developer must choose and implement a secure method of storing the authentication credentials that are used in the automation code. Which password handling method must be used to minimize the security risk?
Show answer
Answer: B
Explanation
Option B is the correct answer. Storing the username and password in a separate configuration file can potentially expose the credentials to unauthorized users if the file is not properly secured. It is generally more secure to store sensitive information, such as passwords, in a secure storage system, such as a vault, rather than in a configuration file or in code.
Source: Adapted from community discussion — mellohello
