What is considered a secret?

• A. Anything that is used for authentication or connection purposes. (Authentication credentials, tokens, private keys)
• B. A publicly accessible URL
• C. A license file
• D. A test script

Answer: (A)

Secrets are sensitive information that prove identity or grant access to systems, so they must be kept confidential to prevent unauthorized use. The best example is anything used for authentication or connection purposes—authentication credentials, tokens, and private keys—because these items directly unlock resources or establish trust with services. A publicly accessible URL isn’t a secret by design; it’s meant to be shared and reachable. A license file governs usage rights rather than access to a system. A test script is code used for testing and isn’t used to authenticate or connect, even though it may be sensitive for other reasons.