フリー問題

問題文

A Finding reports a long-lived cloud access key stored in plain text on a virtual machine. What is the necessary action?

選択肢

1. Treat the key as compromised and replace it, then remove the stored copy and review what the key could reach.
2. Tighten the file permissions so that only the service account can read it, which removes the exposure without any change to the systems that depend on it.
3. Move the file to a directory on the same host that ordinary users cannot list, and record the new location in the ticket.
4. Ignore the Finding because the host is not reachable from the Internet, which puts the stored copy out of an attacker's reach.