Why is logging of REST API requests important for security?

It prevents unauthorized access

It speeds up API response times

It provides an audit trail that can be used to detect and investigate suspicious activity

Which monitoring practice is most effective for detecting a brute-force attack on a REST API?

Monitoring for new API keys being created

Monitoring for repeated failed authentication attempts from the same source

Monitoring for changes in API response time

Monitoring for high CPU usage on the API server

A developer is building a mobile app that uses a REST API to let users view their own network usage data. The app must authenticate users and obtain their consent before accessing data. The API must not receive the user's password. Which OAuth 2.0 flow is most appropriate?

Resource owner password credentials flow.

Authorization code flow with PKCE.

A REST API defines roles such as 'network-admin' and 'network-viewer'. The 'network-admin' role can modify device configurations, while 'network-viewer' can only read them. This is an example of which security control?

Role-based access control (RBAC)

A network engineer is troubleshooting a REST API client that is failing to connect to a Cisco Catalyst Center (DNA Center) instance. The client is using a self-signed certificate on the server. The engineer has added the certificate to the client's trust store, but the connection still fails with a TLS error. The engineer confirms that the client is using HTTPS and the correct port. What is the most likely cause of the remaining TLS error?

The certificate's subject name does not match the hostname used in the API request URL.

The client is using an outdated TLS version.

The server is not configured for HTTPS.

CiscoCertified Network Professional Enterprise

Domain 5Objective 3

5.3 Describe REST API Security 350-401 Practice Questions (Page 5)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

8concepts

20%of the exam

Questions 21–25

21foundation · easy
Why is logging of REST API requests important for security?
Select an answer first
22foundation · easy
Which monitoring practice is most effective for detecting a brute-force attack on a REST API?
Select an answer first
23application · medium
A developer is building a mobile app that uses a REST API to let users view their own network usage data. The app must authenticate users and obtain their consent before accessing data. The API must not receive the user's password. Which OAuth 2.0 flow is most appropriate?
Select an answer first
24foundation · easy
A REST API defines roles such as 'network-admin' and 'network-viewer'. The 'network-admin' role can modify device configurations, while 'network-viewer' can only read them. This is an example of which security control?
Select an answer first
25expert · hard
A network engineer is troubleshooting a REST API client that is failing to connect to a Cisco Catalyst Center (DNA Center) instance. The client is using a self-signed certificate on the server. The engineer has added the certificate to the client's trust store, but the connection still fails with a TLS error. The engineer confirms that the client is using HTTPS and the correct port. What is the most likely cause of the remaining TLS error?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.