UiPath-ADPv1 REFramework Practice Question
Where should you store sensitive information, such as passwords or API keys, when working with REFramework?
⚠ Common exam trap
Candidates frequently suggest storing sensitive information in the Config.xlsx file, ignoring security best practices that dictate credentials must be kept in secure, encrypted Orchestrator Assets to prevent unauthorized access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In Orchestrator Assets
Orchestrator Assets are the secure, centralized repository for credentials in UiPath. Storing sensitive data in the Config.xlsx file is a major security risk because that file is often stored in plain text in source control or shared drives. Using Assets allows for encryption and proper access management, which is a fundamental requirement for any enterprise-grade automation project following security best practices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Directly in the Config.xlsx file
Why it's wrong here
Storing passwords in the Config.xlsx file is highly insecure as the file is often plain text. Access to this file is usually too broad, potentially exposing sensitive credentials to unauthorized users or systems that have access to the project directory or version control repositories.
- ✗
In a hardcoded variable within the Initialization state
Why it's wrong here
Hardcoding credentials in the code is a severe security vulnerability. It makes the code brittle, difficult to update without redeployment, and exposes sensitive data to anyone with read access to the project files, violating basic security principles and enterprise compliance requirements for automation development.
- ✓
In Orchestrator Assets
Why this is correct
Orchestrator Assets provide a secure, encrypted storage mechanism for credentials. They allow the framework to retrieve sensitive data at runtime without hardcoding them, ensuring that the process remains secure, compliant, and easy to manage from a centralized administrative perspective within the UiPath platform.
- ✗
In a local text file
Why it's wrong here
Storing passwords in a local text file is inherently insecure. Anyone with access to the robot machine's file system could read the plain-text password, leading to a major security breach. This practice contradicts all professional standards for managing sensitive information in automated business processes.
About these practice questions
Courseiva writes every UiPath-ADPv1 question from scratch — 276 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official UiPath exam blueprint
This UiPath-ADPv1 practice question is part of Courseiva's free UiPath certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the UiPath-ADPv1 exam.