CCDV-F objective 7.4 · Domain 7 · 8.1% of the exam
Identity, Secrets, and Key Management
The model never needs a credential in order to cause a call that carries one. Trusted code attaches it on the way out, and every alternative puts the secret somewhere durable, since a prompt, a message or a tool argument all survive in history, transcripts and traces long after the request finished. A key in a shipped bundle is public, so remediation is rotation now plus a backend rather than obfuscation. Keys belong to the organisation, which is why removing a leaver leaves theirs working.
6 questions · answers and explanations shown as you go · free, no sign-up
The rest of domain 7: Security and Safety
This domain is 8.1% of a scored form, about 4 of the 53, spread across 4 objectives. Drill the whole domain or pick another objective below.
One objective is a narrow slice. A full-length timed mock is what tells you whether the whole thing holds together.
Sit a timed mock →