Cypress · Senior · Question 38 of 76
How should test accounts used by Cypress be secured?
- 1Shared admin accounts with passwords written in the specs
- 2Least privilege, separate from production, secrets from CI vault
- 3Real customer accounts so tests use realistic data
Show the answer
Correct answer: Least privilege, separate from production, secrets from CI vault
Explanation
Leaked test credentials shouldn't open production data. Rotate them and keep them out of the repository.