Exam 200-901 topic 1 question 67 discussion

should be 'B'

A https://developer.cisco.com/codeexchange/github/repo/obrigg/meraki-channel-distribution/

API keys are sensitive information and should be stored securely to prevent unauthorized access. The best practice is to store them in a secure environment variable, separate from the application code. A. Store API keys in environment variables (Best Practice) • Environment variables are not stored in the codebase, reducing the risk of accidental exposure in version control (e.g., Git). • They are specific to the system/user session, making them more secure. • Can be accessed in code using: • Python: import os api_key = os.getenv("API_KEY") • Node.js: const apiKey = process.env.API_KEY;

encrypted

The only one making sense for the "safe" part is B

A example : bash - export switchuser='cisco' python: import os user = os._enveron.get('switchuser')

I prefer A over B but B also can make sense

A is the right answer.

Concerning B: The problem here is that you need a key to decrypt the file and unless you enter that interactively you have to store it somewhere so that its accessible at run time and at that point, if someone has access to the script they likely have access to the key so you are not much better off. So only remains A.

A Storing the Meraki API Key as an environment variable Once the API key is obtained, you'll need to store the Meraki dashboard API key as an environment variable: export MERAKI_KEY = <YOUR MERAKI API KEY>

key words: "safely store". As an environment variable, it's neither safe or stored: not safe because it's not encrypted in any way nor stored as it is in volatile memory. Answer is B.

Cisco Pearson courses reco => env Google reco => both encrypted / env To me it's A

Keys should never be stored in code or config, but in environment variables

I think is A, but system database seems very misleading...

You can do A and B but the questions what method is a "safe" way to do so. Storing it in an environment variable is NOT secure but putting it in an ENCRYPTED config file separated from code is much safer.

I am convinced with B as per the below statement. "You use this API key. And you'll notice here that, first of all, the API key is this big, long string of confusing data. You would never remember that API key and use it to type it in as a user. You would store it inside of your program, or inside of a configuration file somewhere so your program could reference it and use it."

at end, A or B?