API API Authentication and Security 2

Question 1

What is rate limiting in API security?

Accepted Answer

Restricting the number of requests a client can make in a time window

Answer

Rate limiting restricts the number of API requests a client can make within a specific time window to prevent abuse and DoS attacks.

Question 2

What does HTTPS provide that HTTP does not?

Accepted Answer

Encrypted transmission of data

Answer

HTTPS uses TLS/SSL to encrypt data in transit, preventing eavesdropping and man-in-the-middle attacks.

Question 3

Which OWASP API vulnerability involves an API returning more data than the client needs?

Accepted Answer

Excessive Data Exposure

Answer

Excessive Data Exposure occurs when an API returns more data than necessary, relying on clients to filter it, exposing sensitive information.

Question 4

What is CORS in the context of API security?

Accepted Answer

A cross-origin resource sharing policy controlling browser requests

Answer

CORS (Cross-Origin Resource Sharing) is a browser security policy that controls which origins can make requests to an API.

Question 5

What is SQL injection in API testing?

Accepted Answer

Injecting malicious SQL through API inputs to manipulate the database

Answer

SQL injection involves sending malicious SQL code through API parameters to manipulate or access the database unauthorized.

API - Testing Practice Test