hardMultiple ChoiceObjective-mapped
200-901 Practice Question: A team is designing a CI/CD pipeline that uses…
A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a secrets management service and reference it in the pipeline
Storing credentials in a secrets management service and referencing them in the pipeline is a security best practice. Hardcoding or storing in plain text is insecure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Store credentials in plain text in the pipeline configuration
Why it's wrong here
Plain text is insecure and violates best practices.
- ✓
Use a secrets management service and reference it in the pipeline
Why this is correct
Secrets management services like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault provide secure storage.
- ✗
Hardcode credentials in the source code
Why it's wrong here
Hardcoding credentials in source code is a security risk.
- ✗
Use a shared user account with no MFA
Why it's wrong here
Shared accounts without MFA are insecure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.