An organization is integrating two systems for real-time API communication. Which of the following is the BEST approach to ensure secure authentication between the two applications before going live?

The correct answer is A. Conduct penetration testing to identify vulnerabilities that might allow unauthenticated access. Before enabling real-time API communication between two systems, conducting penetration testing is the best approach to ensure that the authentication mechanisms are securely implemented and resistant to bypass or exploitation. This proactive testing validates that only…

Submitted by carter_n· Apr 18, 2026Information Systems Acquisition, Development and Implementation

Question

Options

AConduct penetration testing to identify vulnerabilities that might allow unauthenticated access.
BPerform user acceptance testing (UAT) for user login interfaces and the user authentication
CReview security incident and event management (SIEM) solution logs.
DReview firewall configuration and rules across both system environments.

How the community answered

(13 responses)

A
77% (10)
C
15% (2)
D
8% (1)

Explanation

Before enabling real-time API communication between two systems, conducting penetration testing is the best approach to ensure that the authentication mechanisms are securely implemented and resistant to bypass or exploitation. This proactive testing validates that only authorized applications can access the APIs before going live.

Topics

#Penetration Testing#API Security#Authentication#Application Security Testing

Community Discussion

No community discussion yet for this question.

Full CISA Practice