nerdexam
Isaca

CISA · Question #521

Which of the following controls BEST helps to prevent sensitive data leakage when using APIs?

The correct answer is D. Ensuring APIs authenticate endpoints before allowing access. Endpoint authentication ensures that only authorized systems or users can access the API, preventing unauthorized data exposure and reducing the risk of sensitive data leakage. This control enforces secure communication and trust between interacting systems.

Submitted by carlos_mx· Apr 18, 2026Protection of Information Assets

Question

Which of the following controls BEST helps to prevent sensitive data leakage when using APIs?

Options

  • AMaintaining an updated inventory of all APIs used in the organization
  • BImplementing strong passwords to authenticate users
  • CConducting periodic scans of all APIs to identify vulnerabilities
  • DEnsuring APIs authenticate endpoints before allowing access

How the community answered

(60 responses)
  • A
    12% (7)
  • B
    3% (2)
  • C
    7% (4)
  • D
    78% (47)

Explanation

Endpoint authentication ensures that only authorized systems or users can access the API, preventing unauthorized data exposure and reducing the risk of sensitive data leakage. This control enforces secure communication and trust between interacting systems.

Topics

#API Security#Data Leakage Prevention#Endpoint Authentication#Access Control

Community Discussion

No community discussion yet for this question.

Full CISA Practice