4.9 Interpret API Authentication Mechanisms: Basic, Custom Token, and API Keys 350-201 Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   What is the primary security implication of using HTTP Basic authentication without TLS?

   • AThe server cannot verify the identity of the client because no certificate is exchanged
   • BCredentials are sent in plaintext and can be intercepted by anyone on the network path
   • CThe credentials are encrypted with a weak cipher that is easy to break
   • DThe credentials are hashed with MD5 and can be reversed with brute force
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network automation engineer is configuring a script to interact with a cloud security API. The API uses custom token authentication. The engineer needs to obtain a token using a client ID and client secret. Which HTTP method and endpoint pattern is typically used to request the token?

   • APUT to an authentication endpoint with the client credentials in the headers
   • BGET to an authentication endpoint with the client credentials in the URL query string
   • CDELETE to an authentication endpoint to invalidate the token
   • DPOST to an authentication endpoint with the client credentials in the request body
   Reveal Solution Discussion Select an answer first