Which security measure is commonly implemented at an API gateway to protect against man-in-the-middle attacks?

Cross-origin resource sharing (CORS) configuration

How does an API gateway use service discovery to route requests to microservices?

It reads the service's configuration file to determine the endpoint

It queries a service registry to find the network address of an available service instance

It uses DNS to resolve the service name to a static IP address

It broadcasts a request to all microservices and uses the first response

A company is building a microservices application and wants to simplify client integration. Clients should only need to know one base URL and should not need to handle service-specific authentication. Which design pattern achieves this?

Use a DNS round-robin to distribute client requests across all microservices.

Let clients call each microservice directly using its own URL and API key.

Embed service discovery logic in the client application.

Expose a single API gateway as the front door, with clients using one base URL and the gateway handling authentication.

How does an API gateway support the scaling of microservices?

It automatically provisions new instances of the microservice when traffic increases

It distributes incoming requests across multiple instances of a service as they are added or removed

It stores the state of the microservice to allow horizontal scaling

It increases the CPU and memory limits of the microservice containers

GIAC Cloud Security Automation

Domain 4Objective 3

Microservice API Gateways GCSA Practice Questions (Page 8)

Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 36–40

36foundation · easy
Which security measure is commonly implemented at an API gateway to protect against man-in-the-middle attacks?
Select an answer first
37foundation · easy
How does an API gateway use service discovery to route requests to microservices?
Select an answer first
38application · medium
A company is building a microservices application and wants to simplify client integration. Clients should only need to know one base URL and should not need to handle service-specific authentication. Which design pattern achieves this?
Select an answer first
39foundation · easy
How does an API gateway support the scaling of microservices?
Select an answer first
40application · medium
A company exposes a public API through an API gateway. They have observed a spike in requests from a single IP address attempting to guess API keys. Which gateway feature should be configured to mitigate this attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.