Question 220
A team stores model API keys directly in a version-controlled SQL Database Project. Which preventive practice BEST addresses the underlying risk over time?
Explanation
Correct Answer
Rotate any exposed keys and protect repository history. This guards against recurrence because repository history retains secrets even after a visible commit is removed. The direct remediation is: Remove keys and use deployment-time secret references or supported managed identity.
Incorrect Answers
Review grants separately when components are replaced. The current task instead requires this action: rotate any exposed keys and protect repository history.
Rotate signing keys and validate audiences and issuers. The current task instead requires this action: rotate any exposed keys and protect repository history.
Monitor service-principal grants and run negative authorization tests. The current task instead requires this action: rotate any exposed keys and protect repository history.