An application contains an OSGi configuration that contains a password. How should a developer prevent this sensitive information from being stored in plain text in JCR?
A.
1. Use console at /system/console/crypto to encrypt the value. 2. Either create an encrypted value for each AEM instance and use runmodes to apply the different values or make sure relevant instances share the same master key. 3. When loading the value in the code, call CryptoSupport.unprotect("¦) before using the value.
B.
1. Use console at /system/console/configMgr and tick the checkbox "encrypt" before saving a configuration. 2. Use encrypted values work across all instances. 3. When loading the value in the code, call CryptoSupport.unprotect("¦) before using the value.
C.
1. Use console at /system/console/ configMgr and tick the checkbox "encrypt" before saving a configuration. 2. Either create an encrypted value for each AEM instance and use runmodes to apply the different values or make sure relevant instances share the same master key. 3. Sensitive information is automatically decrypted using the CryptoSupport OSGi service before the value is returned.
D.
1. Use console at /system/console/crypto to encrypt the value. 2. Either create an encrypted value for each AEM instance and use runmodes to apply the different values or make sure relevant instances share the same master key. 3. Sensitive information is automatically decrypted using the CryptoSupport OSGi service before the value is returned.
Answer: A
Reference:
https://www.argildx.com/technology/crypto-support-aem/
https://docs.adobe.com/content/help/en/experience-manager-65/administering/security/encryption-support-for-configuration-properties.html
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
chunpin
4 years, 2 months ago