300-910 · Question #30
Which two elements help to secure your API keys? (Choose two.)
The correct answer is B. SHA1 D. rotation. The question asks to identify two key security practices or elements that enhance the protection of API keys.
Question
Exhibit
Options
- Arandomness
- BSHA1
- Ctriple AES
- Drotation
- Edictionary
How the community answered
(56 responses)- A2% (1)
- B89% (50)
- C2% (1)
- E7% (4)
Why each option
The question asks to identify two key security practices or elements that enhance the protection of API keys.
Randomness is essential for generating strong, unpredictable API keys initially, but it is a property of the key's creation rather than an ongoing 'element' that actively secures an existing key in terms of its management or protection from compromise.
While SHA1 is a hashing algorithm and not direct encryption, it can be used in conjunction with API keys for cryptographic operations like HMAC-SHA1 to sign API requests, ensuring message integrity and authenticity and thus helping to secure the communication using the key.
Triple AES (Advanced Encryption Standard) is a strong symmetric encryption algorithm that would be excellent for securely storing API keys at rest; however, given the provided correct answers, the question likely seeks different types of security 'elements' or practices.
Rotation refers to the practice of regularly changing API keys. This is a critical security measure because it limits the window of opportunity for an attacker if a key is compromised, significantly reducing the impact of a breach.
A dictionary refers to a list of common words or patterns used in dictionary attacks, which are what strong, random keys and robust security practices aim to prevent, not an element that secures keys.
Concept tested: API key security practices
Topics
Community Discussion
No community discussion yet for this question.
