4.3 Explain the Process of Third-Party API Gateway Integration (e.g., AWS, API Gateway, APIM, Apigee) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which Apigee component is commonly used to export API traffic data for integration with a security platform?

   • AApigee Edge UI
   • BApigee Developer Portal
   • CApigee Monetization
   • DApigee Analytics
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has integrated Azure API Management with the CSPM platform. The security team wants to block requests that match known malicious patterns before they reach the backend API. Where should the threat-prevention policy be applied?

   • AIn the backend application, add middleware that validates the request against the CSPM platform's threat feed.
   • BIn APIM, add an inbound policy that checks the request against the CSPM platform's threat feed and returns a 403 response for matches.
   • CIn the CSPM platform, configure a policy that instructs APIM to reject matching requests.
   • DIn Azure Active Directory, create a conditional access policy that blocks the API consumer.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company uses Azure API Management and wants the CSPM platform to detect and block SQL injection attempts in API requests. The integration is complete. What is the most effective way to achieve this?

   • AEnable APIM's built-in DDoS protection and rely on Azure's default security policies.
   • BAsk the backend application team to add input validation for all API parameters.
   • CCreate an Azure Policy that audits APIM logs for SQL injection attempts and alerts the security team.
   • DConfigure the CSPM platform to send threat signatures to APIM, and add an inbound policy in APIM that blocks matching requests.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization uses Azure API Management (APIM) to expose internal APIs. The security team wants the CSPM platform to receive request/response metadata and apply threat-prevention policies to the API traffic. The APIM instance is already deployed. What must be configured to send the required data to the CSPM platform?

   • AAttach an Azure Policy to the APIM instance that exports all traffic to the CSPM platform's storage account.
   • BCreate an APIM product and subscribe the CSPM platform to it using a subscription key.
   • CEnable APIM diagnostics settings and stream the logs to an Event Hub that the CSPM platform consumes.
   • DConfigure a VNet integration so the CSPM platform can directly query the APIM gateway's internal database.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which benefit is directly achieved by integrating a third-party API gateway with a cloud security posture management platform?

   • AElimination of all network latency for API calls
   • BCentralized security monitoring and enforcement for API traffic
   • CAutomatic creation of new API endpoints
   • DDirect modification of API gateway configuration
   Reveal Solution Discussion Select an answer first