What is a best practice for managing the lifecycle of an API version?

Deprecate old versions immediately when a new version is released

Provide a deprecation schedule and communicate it to consumers before retiring an old version

Keep all deprecated versions running indefinitely to avoid breaking clients

Do not document version changes to avoid confusion

What is the role of vulnerability scanning in API security testing?

To automatically identify known vulnerabilities in API dependencies and configurations

To replace the need for manual code review

Which statement about JSON Web Tokens (JWT) is accurate?

JWTs never expire and are valid indefinitely

JWTs are only used for authentication, not authorization

JWTs are always encrypted to protect the payload

JWTs are self-contained and can carry claims about the user and permissions

A security analyst is reviewing API logs and notices a pattern of successful logins from many different IP addresses using the same user account within a short time. The account is a service account used by a legitimate application. What is the most likely explanation and the best response?

The logs are inaccurate; rely on the cloud provider's monitoring

The API is behind a load balancer, so the source IPs vary; no action is needed

The service account credentials are compromised and being used from multiple locations; rotate the credentials and investigate

The service account is misconfigured to allow multiple sessions; disable the account

What is the main purpose of API rate limiting?

To limit the number of requests a client can make within a given time period

To encrypt API traffic between client and server

To increase the speed of API responses

To authenticate clients before they access the API

EC-CouncilCloud Security Essentials

Domain 5Objective 4

API Security and Integration Best Practices CSE Practice Questions (Page 1)

Part of the Application Security in the Cloud domain, which makes up ~16% of our current practice bank.

57questions here

12free pages

10concepts

10 Concepts in This Objective

API Security Fundamentals
Authentication and Authorization for APIs
API Data Validation and Input Sanitization
API Rate Limiting and Throttling
API Logging and Monitoring
API Encryption and Secure Communication
API Versioning and Lifecycle Management
Integration Best Practices
API Security Testing
Compliance and Governance for APIs

Questions 1–5

1foundation · easy
What is a best practice for managing the lifecycle of an API version?
Select an answer first
2foundation · easy
What is the role of vulnerability scanning in API security testing?
Select an answer first
3foundation · easy
Which statement about JSON Web Tokens (JWT) is accurate?
Select an answer first
4expert · hard
A security analyst is reviewing API logs and notices a pattern of successful logins from many different IP addresses using the same user account within a short time. The account is a service account used by a legitimate application. What is the most likely explanation and the best response?
Select an answer first
5foundation · easy
What is the main purpose of API rate limiting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.