API API Authentication & Security Testing 2

Question 1

What does JWT stand for in the context of API authentication?

Accepted Answer

JSON Web Token

Answer

Java Web Token

Answer

JavaScript Webservice Transport

Answer

JSON Workflow Transaction

Question 2

Which part of a JWT contains the user claims and data?

Accepted Answer

Payload

Answer

Header

Answer

Signature

Answer

Algorithm

Question 3

What is CORS and why is it important in API security testing?

Accepted Answer

A browser mechanism controlling cross-origin requests

Answer

A caching strategy for APIs

Answer

A token refresh protocol

Answer

An encryption standard for API keys

Question 4

Which HTTP status code does an API return when a request lacks valid authentication credentials?

Accepted Answer

401 Unauthorized

Answer

400 Bad Request

Answer

403 Forbidden

Answer

404 Not Found

Question 5

What is a replay attack in the context of API security?

Accepted Answer

Sending the same valid request multiple times to exploit the API

Answer

Replaying a video response

Answer

Retrying failed requests automatically

Answer

Caching and replaying API responses

Question 6

Which security testing technique sends unexpected or malformed data to an API to discover vulnerabilities?

Accepted Answer

Fuzzing

Answer

Load testing

Answer

Smoke testing

Answer

Contract testing