easy5 pts · first answer countssecurityconfiguration

Keeping secrets out of code

Your app needs a database password and a payment gateway API key. Where should these values live?

A.Hard-coded in a config.js file committed to GitB.In environment variables or a secrets manager, not in the source codeC.In the frontend bundle so the browser can call the gateway directlyD.In a comment at the top of the main file

← 401 or 403 Updating only one field →