Question
Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?
- A. usernames
- B. sealed boxes
- C. Personal Identifiable Information (PII)
- D. private keys Correct
Explanation
Secret scanning looks for known types of authentication credentials, such as tokens and private keys, that were committed to a repository. Usernames and personal information are not credentials with a recognizable pattern, so they are not detected unless you define a custom pattern for them. A sealed box is an encryption technique, not a type of secret that secret scanning looks for.
