SecGov (D)

Question 1

Are essential components of system integration in order to safeguard APIs from unauthorized access, guarantee data privacy, and preserve integrity of integrated systems

Answer 1

API Security and Access Control

Question 2

How might you apply an API Security Fundamentals?

Answer 2

API Key Authentication

Question 3

What is an API Key Authentication?

Answer 3

Common and straightforward technique for controlling API Access where each client has a unique key included in authentication and authorization requests.

Question 4

What services require developers to acquire API Key Authentication to access their APIs

Answer 4

Google Maps, Twitter

Question 5

What does OAuth 2.0 for Third-Party API Access do?

Answer 5

allow third-party apps to access APIs securely by allowing users to grant restricted permissions without disclosing actual credentials

Question 6

How might social media platforms like Facebook and LinkedIn use OAuth 2.0?

Answer 6

to grant secure access for functions like social login or data integration

Question 7

An RBAC allows administrators to do what?

Answer 7

Set and enforce granular access policies depending on user roles

Question 8

How might an online store API utilize RBAC?

Answer 8

have different roles like “admin”, “customer” and “guest” with specific perms to access or edit resources

Question 9

What is an application of API Rate Limiting and Throttling?

Answer 9

API Rate Limiting for Protection and Governance

Question 10

Implementing this helps control the volume of requests made by a client, prevents abuse and ensures equitable utilization of infrastructure resources.

Answer 10

Rate Restriction

Question 11

How might major APIs like Google Maps and Twitter use API Rate Limiting and Throttling?

Answer 11

Provide fair access to their services

Question 12

What might be an application of API Security Testing and Vulnerability Assessment

Answer 12

API Security Testing Tools and Practices

Question 13

T or F

There is a small amount of software and frameworks available to perform JSON security audits, locate security flaws, and verify that a system complies with security standards

Answer 13

False. Wide variety of software and frameworks available to perform API security audits

Question 14

What are some tools popular on evaluating API security and locating potential flaws?

Answer 14

OWASP ZAP, Postman, Burp

Question 15

What are some strong security measures that Organizations may implement to secure and regulate access to their APIs

Answer 15

API Key Authentication
OAuth 2.0
RBAC
Rate Limitation
Frequent Security Testing