Web Security · Senior · Question 74 of 75
What's the right order of actions when a production secret leaks?
- ✓Correct answer: Rotate or revoke it, check logs for misuse, fix how it leaked, then document the incident
- 2Delete the logs so the leak can't be seen
- 3Write the incident report first, then wait for approval to rotate
Explanation
Containment comes first. Logs are evidence and must be kept; a blameless review afterwards prevents a repeat.