nerdexam
Isaca

CISM · Question #562

An organization has recently implemented additional application programming interfaces (APIs) to enhance data exchange with vendors. Which of the following is MOST important to ensure coverage of…

The correct answer is A. Testing the authorization mechanisms in place to secure API endpoints. The most important action to ensure API-related risk coverage is testing the authorization mechanisms securing API endpoints. APIs can expose sensitive data or functionality, so strong authentication and authorization controls are critical to prevent unauthorized access and data

Submitted by daniela_cl· Apr 18, 2026Information Security Risk Management

Question

An organization has recently implemented additional application programming interfaces (APIs) to enhance data exchange with vendors. Which of the following is MOST important to ensure coverage of API-related risks during the next API management process audit?

Options

  • ATesting the authorization mechanisms in place to secure API endpoints
  • BReviewing the process of API documentation and version control to ensure accuracy and
  • CVerifying the adequacy of disaster recovery and business continuity plans for critical APIs
  • DEvaluating the compliance of APIs with the organization's standards and best practices

How the community answered

(28 responses)
  • A
    75% (21)
  • B
    4% (1)
  • C
    7% (2)
  • D
    14% (4)

Explanation

The most important action to ensure API-related risk coverage is testing the authorization mechanisms securing API endpoints. APIs can expose sensitive data or functionality, so strong authentication and authorization controls are critical to prevent unauthorized access and data

Topics

#API Security#Authorization#Risk Management#Security Audit

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CISM Practice