Question 870
A notebook team wants reliable review and release history for production ETL. An auditor must prove the outcome of Remove secret use, rotate credentials and replace them with secret references for this requirement: A notebook has hard-coded secrets checked into Git history. Which test result is best?
Explanation
Correct Answer
The current deployment no longer contains the secret and the old credential is revoked directly measures whether Remove secret use, rotate credentials and replace them with secret references achieved the requirement “A notebook has hard-coded secrets checked into Git history.” It checks the operating result rather than just a configured resource name.
Incorrect Answers
This signal belongs to the adjacent case “A production notebook change must be peer-reviewed before deployment,” whose remedy is Use a Git-backed branch and pull-request review workflow. The observed result for the present requirement is The current deployment no longer contains the secret and the old credential is revoked.
That observation is a valid indicator for “A developer needs to test a feature branch without modifying production code” when using Use an isolated Git branch or workspace Git folder checkout. The scenario instead tests “A notebook has hard-coded secrets checked into Git history”; the relevant result is The current deployment no longer contains the secret and the old credential is revoked.
Production resources run the known-good code version again pertains to a different control (Redeploy the last validated version/tag from Git) and a different need (A production change introduces a regression and the team needs rollback). It cannot establish that Remove secret use, rotate credentials and replace them with secret references met the stated goal.