ITGSS Certified DevOps Engineer Practice Test

What should be done to a bootstrap token once the bootstrap phase of a system setup is complete?

1. It should be monitored continuously

2. It should be revoked or its authorization removed

3. It should be extended for future use

4. It should be shared with team members

The correct answer is: It should be revoked or its authorization removed

Once the bootstrap phase of a system setup is complete, the appropriate action regarding a bootstrap token is to revoke it or remove its authorization. This is due to security best practices aimed at minimizing potential vulnerabilities. Bootstrap tokens typically grant elevated access to systems during initial configurations, but once their intended purpose is fulfilled, these tokens should not remain active, as they can be exploited if someone gains access to them. Revocation or removal limits the chance of unauthorized access to the system and mitigates risks associated with lingering credentials that could be used maliciously. It's crucial in maintaining a secure environment, especially in scenarios where other setup processes may inadvertently expose the token after its necessary use. This proactive approach to security ensures that only currently needed credentials remain active, safeguarding the integrity of the system.