What is a fundamental security best practice for API authentication?

Implementing strong authentication such as OAuth 2.0 or API keys with proper management

Relying on the client's IP address for authentication

Using API keys in the URL for easy access

Allowing all requests from any origin to simplify integration

Why is it important to validate and sanitize input in an API?

To improve the performance of the API by reducing data size

To prevent injection attacks and other malicious payloads

To authenticate the client making the request

To ensure that the API returns responses in JSON format

An application's logs show a series of failed login attempts followed by a successful login from an unusual IP address. The account belongs to a high-privilege user. What is the first step in the incident response process?

Ignore the event because it is only a single successful login

Disable the compromised account and force a password reset

Notify the user and ask them to change their password

Delete the log files to prevent further exposure

What is the primary purpose of hashing a password before storing it in a database?

To protect the password from being read by anyone who gains access to the database

To ensure that the original password can be recovered if forgotten

To compress the password so it takes up less storage space

To encrypt the password so it can be decrypted by the application

What is a secure deployment practice for minimizing vulnerabilities in a production environment?

Granting all users administrative privileges to simplify access

Disabling detailed error messages that could reveal internal information

Using default configurations to ensure compatibility

Enabling debug mode to help troubleshoot issues in production

EC-CouncilCertified Cybersecurity Technician

Domain 3Objective 2

Application Security CCT Practice Questions (Page 6)

Part of the Security Assessment and Application Security domain, which makes up ~9% of our current practice bank.

51questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
What is a fundamental security best practice for API authentication?
Select an answer first
27foundation · easy
Why is it important to validate and sanitize input in an API?
Select an answer first
28application · medium
An application's logs show a series of failed login attempts followed by a successful login from an unusual IP address. The account belongs to a high-privilege user. What is the first step in the incident response process?
Select an answer first
29foundation · easy
What is the primary purpose of hashing a password before storing it in a database?
Select an answer first
30foundation · easy
What is a secure deployment practice for minimizing vulnerabilities in a production environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.