A company exposes a public API that allows partners to retrieve customer data. The API currently uses a single API key for all partners. The security team wants to implement more granular access control and track usage per partner. Which approach is best?

Allow partners to authenticate with their social media accounts

Remove authentication and rely on IP allowlisting

Issue unique API keys per partner and enforce scopes

Use a single shared key but rotate it monthly

EC-CouncilCertified Cybersecurity Technician

Domain 3Objective 2

Application Security CCT Practice Questions (Page 11)

Part of the Security Assessment and Application Security domain, which makes up ~9% of our current practice bank.

51questions here

11free pages

10concepts

Questions 51–51

51expert · hard
A company exposes a public API that allows partners to retrieve customer data. The API currently uses a single API key for all partners. The security team wants to implement more granular access control and track usage per partner. Which approach is best?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Application Security CCT Practice Questions (Page 11)

Questions 51–51

A company exposes a public API that allows partners to retrieve customer data. The API currently uses a single API key for all partners. The security team wants to implement more granular access control and track usage per partner. Which approach is best?

Keep studying — Security Assessment and Application Security