Câu 36: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A security engineer thinks the development team has been hard-coding sensitive environment variables in its code. Which of the following would BEST secure the company's CI/CD pipeline?

1. A. Utilizing a trusted secrets manager — đáp án hiện tại
2. B. Performing DAST on a weekly basis
3. C. Introducing the use of container orchestration
4. D. Deploying instance tagging