API API Authentication & Security Testing

Question 1

Which authentication mechanism uses a Bearer token included in the Authorization header?

Accepted Answer

OAuth 2.0 / JWT

Answer

Basic Auth

Answer

API Key in URL

Answer

Digest Auth

Question 2

What is an API key primarily used for in API security testing?

Accepted Answer

Identifying and authenticating the calling application

Answer

Encrypting the request body

Answer

Compressing response data

Answer

Rate limiting responses

Question 3

Which OWASP API Security risk involves an attacker accessing another user's data by manipulating object IDs?

Accepted Answer

Broken Object Level Authorization

Answer

Excessive Data Exposure

Answer

Security Misconfiguration

Answer

Injection

Question 4

What does HTTPS ensure during API communication?

Accepted Answer

Encryption of data in transit

Answer

Faster response times

Answer

Server-side caching

Answer

Automatic retry logic

Question 5

Which attack involves sending malicious data in API input fields to manipulate backend database queries?

Accepted Answer

SQL Injection

Answer

CSRF

Answer

XSS

Answer

Replay Attack

Question 6

What is the purpose of rate limiting in API security?

Accepted Answer

Prevent abuse by limiting the number of requests per client

Answer

Improve response payload size

Answer

Enable CORS support

Answer

Cache frequent responses