4.3 Explain the Process of Third-Party API Gateway Integration (e.g., AWS, API Gateway, APIM, Apigee) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which issue is commonly encountered when integrating a third-party API gateway with a security platform?

   • AThe API gateway's color scheme
   • BIncorrect permissions preventing log access
   • CThe security platform being too fast
   • DThe gateway generating too few logs
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which type of security policy is commonly applied to API traffic through an integrated gateway?

   • AVirtual machine backup policy
   • BDatabase encryption policy
   • CRate limiting to prevent abuse
   • DNetwork routing policy
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An organization has integrated Azure API Management with the CSPM platform. The integration was working, but after a recent APIM update, the CSPM platform stopped receiving new traffic data. The Event Hub connection appears healthy. What should the administrator investigate first?

   • ACheck whether the backend API's endpoint URL has changed.
   • BCheck whether the APIM diagnostics settings were reset or the diagnostic log category for gateway logs was disabled during the update.
   • CConfirm that the CSPM platform's subscription key for the APIM product is still valid.
   • DVerify that the APIM instance's public IP address has not changed.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company operates APIs in AWS API Gateway and Apigee. The security team wants to enforce a consistent threat-prevention policy across both platforms using the CSPM platform. The team has limited engineering resources and wants to minimize custom code. What is the most efficient approach?

   • AIntegrate both gateways with the CSPM platform and configure the platform's policy engine to push the same threat rules to both gateways.
   • BConfigure AWS WAF for API Gateway and Apigee's built-in security policies separately.
   • CRoute all API traffic through a single reverse proxy that applies the CSPM platform's policies.
   • DWrite a custom Lambda function for AWS and a JavaScript policy for Apigee that both call the CSPM platform's threat API.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What type of data is typically included in API gateway access logs that are forwarded to a security platform?

   • AFull database credentials for the backend
   • BEncrypted payloads of all API requests
   • CRequest and response metadata such as client IP, method, and status code
   • DSource code of the API implementation
   Reveal Solution Discussion Select an answer first