350-501 · Question #1
How can a network administrator secure rest APIs?
The correct answer is D. They can authenticate user sessions and provide the appropriate privilege level. To secure REST APIs, a network administrator must authenticate user sessions and apply appropriate privilege levels to control access to resources and operations.
Question
How can a network administrator secure rest APIs?
Options
- AThey can allow read and write privileges to all users
- BThey can ensure that user sessions are authenticated using TACACS+ only
- CThey can have a general administrator login for multiple users to access that has command
- DThey can authenticate user sessions and provide the appropriate privilege level
How the community answered
(31 responses)- A6% (2)
- C3% (1)
- D90% (28)
Why each option
To secure REST APIs, a network administrator must authenticate user sessions and apply appropriate privilege levels to control access to resources and operations.
Allowing read and write privileges to all users would be a significant security risk, granting unauthorized access and modification capabilities to all network entities.
While TACACS+ is an authentication protocol, limiting authentication to 'TACACS+ only' is not a comprehensive security strategy, and the core principle of security is proper authentication and authorization regardless of the specific protocol.
Using a general administrator login for multiple users compromises accountability, traceability, and makes auditing difficult, posing a major security vulnerability.
The most secure approach for REST APIs involves authenticating user sessions to verify identity and then providing the appropriate privilege level (authorization) to ensure users can only perform authorized actions, following the principle of least privilege.
Concept tested: REST API security - authentication and authorization
Topics
Community Discussion
No community discussion yet for this question.