Which of the following controls BEST mitigates the risk of unauthorized access to personal information via brute force attacks through application programming interfaces (APIs)?

The correct answer is A. Authentication controls. Brute force attacks work by systematically attempting many credential combinations until one succeeds. Authentication controls - such as rate limiting, account lockout policies, multi-factor authentication, and CAPTCHA - directly interrupt this attack vector by making repeated…

Privacy Architecture

Question

Options

AAuthentication controls
BSufficient logging
CObject level authorization
DMass assignment

How the community answered

(50 responses)

A
74% (37)
B
4% (2)
C
14% (7)
D
8% (4)

Explanation

Brute force attacks work by systematically attempting many credential combinations until one succeeds. Authentication controls - such as rate limiting, account lockout policies, multi-factor authentication, and CAPTCHA - directly interrupt this attack vector by making repeated attempts costly or impossible. Sufficient logging helps detect brute force attempts after the fact but does not prevent them. Object-level authorization governs what authenticated users can access (an OWASP API Security concern), but it does not stop unauthorized login attempts. Mass assignment is an unrelated OWASP vulnerability involving unintended object property modification.

Topics

#API Security#Authentication Controls#Brute Force Mitigation#Privacy Controls

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice