AZ400-Q: respond to a committed secret
A scanner finds a production token in a merged commit. What is the first security action?
- A) Only remove the line in the next release.
- B) Make the repository private and do nothing else.
- C) Revoke or rotate the exposed credential, then remove it and investigate use. ✓
- D) Mark the scanner finding as false positive. Answer: C. History removal does not make a copied credential safe; rotation invalidates it. Why not the others: The remaining choices leave a usable credential exposed.