4.3 Explain the Process of Third-Party API Gateway Integration (e.g., AWS, API Gateway, APIM, Apigee) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   An organization uses Azure API Management and has integrated it with the CSPM platform. The security team wants to block requests from specific IP addresses that are known to be malicious. The team has already configured the CSPM platform to identify these IPs. What is the most efficient way to enforce the block at the APIM gateway?

   • ACreate an Azure Firewall rule that blocks the malicious IPs from reaching the APIM gateway.
   • BAsk the backend application to reject requests from the malicious IPs.
   • CConfigure APIM's rate limiting policy to throttle requests from the malicious IPs.
   • DUse APIM's named values and a policy expression to check the caller IP against a list that is updated by the CSPM platform.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a common method for the security platform to enforce policies on API traffic through the integrated gateway?

   • ABy sending alerts to developers to manually block traffic
   • BBy modifying the API backend code directly
   • CBy pushing policy rules to the gateway that filter or block malicious requests
   • DBy changing DNS records to redirect traffic
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses Apigee as its API management platform. The security team wants to integrate Apigee with the CSPM platform to gain visibility into API traffic. The team has already created a service account in Google Cloud with the required permissions. What is the next step in the integration process?

   • ACreate an Apigee API proxy that forwards all traffic to the CSPM platform's endpoint.
   • BUpload the service account key file into the CSPM platform and provide the Apigee organization name.
   • CGenerate an Apigee API key and configure it as a verify API key policy on the default proxy.
   • DDeploy a shared flow in Apigee that exports trace data to a Cloud Storage bucket for the CSPM platform to read.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team has integrated AWS API Gateway with the CSPM platform. The security analyst notices that the CSPM platform shows API traffic data, but the data is delayed by several hours. What is the most likely cause of this delay?

   • AAPI Gateway access logs are delivered to CloudWatch Logs with a delay, and the CSPM platform polls CloudWatch periodically.
   • BThe IAM role used for the integration has a permissions boundary that throttles data access.
   • CThe CSPM platform is located in a different AWS region than the API Gateway.
   • DThe API Gateway REST API is configured with a usage plan that limits the data transfer rate.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has integrated AWS API Gateway with the CSPM platform. The security team wants to detect anomalies in API traffic, such as a sudden spike in requests from a single IP address. The team has enabled access logging on the API stages. What additional configuration is required in the CSPM platform to detect this anomaly?

   • ADeploy an AWS Lambda function that counts requests per IP and sends the count to the CSPM platform.
   • BConfigure an anomaly detection rule in the CSPM platform that monitors the 'sourceIp' field in the ingested API Gateway logs.
   • CEnable AWS CloudTrail data events for API Gateway and forward them to the CSPM platform.
   • DCreate a new API Gateway stage and configure it to send logs to a separate CloudWatch Log Group.
   Reveal Solution Discussion Select an answer first