Answer-first summary for fast verification
Answer: Use a dedicated Hardware Security Module (HSM) for key storage and implement a centralized certificate management system.
Option B is the most secure approach as it utilizes a Hardware Security Module for secure key storage and implements a centralized certificate management system, ensuring robust security and efficient lifecycle management of critical assets.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Design a solution to manage secrets, keys, and certificates in a financial institution that handles highly sensitive data. How would you ensure the security and lifecycle management of these critical assets?
A
Store all secrets, keys, and certificates in a shared network folder.
B
Use a dedicated Hardware Security Module (HSM) for key storage and implement a centralized certificate management system.
C
Rely on manual processes for key and certificate renewal.
D
Store keys and certificates in the application code repository.
No comments yet.