API Testing CTAL-TTA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which tool is commonly used for automating API tests?

   • ACucumber
   • BJMeter
   • CPostman
   • DSelenium
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A team is integrating an internal API with a third-party API that requires OAuth 2.0 client credentials. The team needs to ensure the integration is secure and reliable. Which approach best addresses both concerns?

   • AUse the same client credentials for all environments (dev, test, prod).
   • BHardcode the client credentials in the integration code for simplicity.
   • CStore the client credentials in a secure vault and use a token refresh mechanism.
   • DRequest a new token for every API call without caching.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A tester is designing negative tests for an API that returns JSON error responses. The API documentation specifies that all errors must include a 'code' and 'message' field. Which test case best verifies this requirement?

   • ASend an invalid request and verify the response contains a 'code' and 'message'.
   • BSend a request with an invalid JSON body and verify the response is empty.
   • CSend a request with a missing header and verify the response status code is 400.
   • DSend a valid request and verify the response contains a 'code' and 'message'.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A team is integrating a new authentication API with an existing user management API. The authentication API issues JWT tokens, and the user management API validates these tokens. Which integration test is most critical to perform?

   • ATest both APIs independently with unit tests.
   • BTest that a token issued by the authentication API is accepted by the user management API.
   • CTest the authentication API's token generation with a valid user.
   • DTest the user management API's token validation with a mock token.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A team is performance testing a payment API. The API specification states that 95% of requests must complete within 500 ms. The team runs a load test with 100 concurrent users and observes an average response time of 450 ms, but the 95th percentile is 800 ms. What should the team conclude?

   • AThe API meets the requirement because 95% of requests are under 800 ms.
   • BThe API fails the performance requirement because the 95th percentile exceeds 500 ms.
   • CThe API meets the performance requirement because the average is below 500 ms.
   • DThe test is invalid because 100 concurrent users is too low a load.
   Reveal Solution Discussion Select an answer first