API Security and Integration Best Practices CSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   Before releasing a new API to production, a security team wants to identify vulnerabilities such as injection flaws and broken authentication. They have a limited budget and need quick results. Which approach should they take?

   • ARun an automated API security scanner that sends malicious payloads and analyzes responses.
   • BPerform a manual code review of every line of code.
   • CWait for production incidents to reveal vulnerabilities.
   • DOnly test the API with valid inputs to ensure functionality.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which principle is fundamental to securing APIs in a cloud environment?

   • AApply security controls at the perimeter only
   • BTrust all internal network traffic by default
   • CAssume every request is untrusted until proven otherwise
   • DRely solely on the cloud provider's default security settings
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is API versioning important for security?

   • AIt allows multiple versions of an API to run simultaneously, which can increase the attack surface
   • BIt automatically encrypts all API traffic
   • CIt enables the introduction of security fixes and breaking changes without disrupting existing clients
   • DIt eliminates the need for authentication
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A developer is integrating a third-party API that occasionally returns malformed JSON responses. The integration is critical and must not crash the application. What is the best practice?

   • AAssume the API will always return valid JSON and process directly
   • BWrap the API call in a try-catch block and log the error
   • CValidate the response schema before processing and handle parsing errors gracefully
   • DRetry the API call indefinitely until a valid response is received
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An e-commerce API is experiencing a spike in traffic from a single IP address, causing performance degradation for other customers. The API uses API keys for authentication. What is the most appropriate immediate control?

   • ABlock the IP address at the firewall
   • BIncrease the API's compute resources
   • CImplement rate limiting per API key and per IP
   • DDisable the API key for that IP
   Reveal Solution Discussion Select an answer first