Câu 20: 3V0-21.25: Advanced VMware Cloud Foundation 9.0 Automation

During a peer review, a developer accidentally committed a YAML manifest containing a plaintext API token, triggering a security alert and raising concerns about the current handling of sensitive values in infrastructure code. The development team uses an AllApps Organization in VMware Cloud Foundation (VCF) Automation and must adhere to security guidelines while minimizing manual steps in the processes. Which approach to manage, store, and distribute sensitive data supports secure automation workflows for Supervisor and vSphere Kubernetes Service (VKS) clusters in VCF Automation?

1. A. Pass secrets as secure input variables during deployments from VCFA’s UI, so the sensitive values are never included directly in blueprints.
2. B. Store secrets in the YAML manifest files in Git, but make sure to mark the Git repository as private to limit exposure.
3. C. Store secrets in a private Git repository and use environment variable substitution in the CI/CD pipeline to inject them into blueprints at build time.
4. D. Use the Secret Store Service (SSS) and reference the required secrets during deployment. — đáp án hiện tại