1Z0-1104-25 Question 129
Single answerYour team stores database credentials in an OCI Vault secret to protect sensitive information. They need to rotate these credentials automatically every 30 days without changing any code references in their microservices. Which approach should you take to ensure the application seamlessly retrieves the updated credentials?
- A
Create a new version of the existing secret in the same vault and reference it by the secret� OCID.
- B
Create a brand-new secret for each rotation and update the application to use the new secret� OCID.
- C
Delete the old secret, create a new vault for each rotation, and move all secrets into the new vault.
- D
Overwrite the existing secret� contents in-place so the same version is used after rotation.
Show answer and explanation
Correct answer: A
Explanation
In OCI Vault, rotating secrets by creating a new version is the recommended way to preserve the same secret reference and maintain a proper rotation history. This ensures microservices can continue using the same secret OCID without needing code or configuration changes. For more information, refer to the official Oracle Cloud Infrastructure documentation on 'Rotating Secrets in OCI Vault.'
- A. Correct.
Correct. By creating a new version of the existing secret, the secret� OCID remains the same, and the microservices continue retrieving the credentials through the same reference. After adding the new version, you can mark it as current so that applications read the updated credentials seamlessly. This approach is recommended best practice in OCI Vault for minimizing downtime and code changes.
- B. Incorrect.
Incorrect. Creating a brand-new secret for each rotation would require updating all references in the application code. This increases operational overhead and risk, making it harder to manage secret usage across multiple environments.
- C. Incorrect.
Incorrect. Deleting the old secret and spinning up a new vault for each rotation is unnecessary and complicates secret management. It� more resource-intensive and increases the risk of misconfiguration and downtime.
- D. Incorrect.
Incorrect. Overwriting the existing secret� contents in-place does not create a new version. OCI Vault best practice for rotation involves creating new versions to maintain proper version history and enable rollback if there are issues with the new credentials.