nerdexam
Cisco

300-910 · Question #30

Which two elements help to secure your API keys? (Choose two.)

The correct answer is B. SHA1 D. rotation. The question asks to identify two key security practices or elements that enhance the protection of API keys.

Security

Question

Which two elements help to secure your API keys? (Choose two.)

Exhibit

300-910 question #30 exhibit

Options

  • Arandomness
  • BSHA1
  • Ctriple AES
  • Drotation
  • Edictionary

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    89% (50)
  • C
    2% (1)
  • E
    7% (4)

Why each option

The question asks to identify two key security practices or elements that enhance the protection of API keys.

Arandomness

Randomness is essential for generating strong, unpredictable API keys initially, but it is a property of the key's creation rather than an ongoing 'element' that actively secures an existing key in terms of its management or protection from compromise.

BSHA1Correct

While SHA1 is a hashing algorithm and not direct encryption, it can be used in conjunction with API keys for cryptographic operations like HMAC-SHA1 to sign API requests, ensuring message integrity and authenticity and thus helping to secure the communication using the key.

Ctriple AES

Triple AES (Advanced Encryption Standard) is a strong symmetric encryption algorithm that would be excellent for securely storing API keys at rest; however, given the provided correct answers, the question likely seeks different types of security 'elements' or practices.

DrotationCorrect

Rotation refers to the practice of regularly changing API keys. This is a critical security measure because it limits the window of opportunity for an attacker if a key is compromised, significantly reducing the impact of a breach.

Edictionary

A dictionary refers to a list of common words or patterns used in dictionary attacks, which are what strong, random keys and robust security practices aim to prevent, not an element that secures keys.

Concept tested: API key security practices

Topics

#API Key Security#Key Rotation#Cryptographic Hashing#API Authentication

Community Discussion

No community discussion yet for this question.

Full 300-910 Practice