300-745 · Question #24
A developer is building new API functions for a cloud-based application. Before writing the code, the developer wants to ensure that destructive actions, including deleting and updating data, are…
The correct answer is A. Open API Specification Analysis. Open API Specification Analysis evaluates API definitions before code is written, identifying risky endpoints (such as delete or update functions) and sensitive fields (like PII or passwords). This allows developers to proactively score risks and apply proper access controls…
Question
A developer is building new API functions for a cloud-based application. Before writing the code, the developer wants to ensure that destructive actions, including deleting and updating data, are properly protected by access control identifying sensitive fields such as those that contain passwords or personally identifiable information. Which approach must be used to score the risks proactively?
Options
- AOpen API Specification Analysis
- BSAST
- CSBOM Generation
- DCSPM
How the community answered
(38 responses)- A74% (28)
- B13% (5)
- C5% (2)
- D8% (3)
Explanation
Open API Specification Analysis evaluates API definitions before code is written, identifying risky endpoints (such as delete or update functions) and sensitive fields (like PII or passwords). This allows developers to proactively score risks and apply proper access controls early in the design
Topics
Community Discussion
No community discussion yet for this question.