A software development team is

conducting functional and user acceptance testing of internally developed web applications using a COTS solution. For automated testing, the solution uses valid user credentials from the enterprise directory to authenticate to each application. The solutio

n stores the username in plain text and the corresponding password as an encoded string in a script within a file, located on a globally accessible network share. The account credentials used belong to the

development team lead. To reduce the risks associa

ted with this scenario while minimizing disruption to ongoing testing, which of the following are the BEST actions to take? (Choose two.)

A. Restrict access to the network share by adding a group only for developers to the share-s ACL

B. Implement a new C

OTS solution that does not use hard-coded credentials and integrates with directory services

C. Obfuscate the username within the script file with encoding to prevent easy identification and the account used

D. Provision a new user account within the

enterprise directory and enable its use for authentication to the target applications. Share the username and password with all developers for use in their individual scripts

E. Redesign the web applications to accept single-use, local account credentials

for authentication