200-901 Question 97
Select 3You are tasked with deploying a centralized authentication system for your organization's APIs using Cisco's API Gateway. Which components should be configured to ensure secure and centralized API access control?
- A
OAuth token validation on the API Gateway
- B
A distributed logging system for API activity
- C
Centralized user identity management with Cisco Identity Services Engine (ISE)
- D
Rate limiting policies on the API Gateway
- E
Role-based access control (RBAC) policies for API consumers
Show answer and explanation
Correct answers: A, C, E
Explanation
Centralized API access control requires a combination of secure authentication, identity management, and authorization mechanisms. OAuth token validation ensures secure authentication, Cisco ISE provides a centralized identity management solution, and RBAC policies enforce fine-grained permissions for API consumers. These components work together to provide a secure and centralized approach to access control for APIs.
- A. Correct.
OAuth token validation ensures that only authorized users and applications can access the APIs. This is a key feature for secure centralized API access control.
- B. Incorrect.
While a distributed logging system is valuable for monitoring and auditing, it is not directly related to controlling access to APIs.
- C. Correct.
Cisco Identity Services Engine (ISE) provides centralized identity management, which is critical to managing user authentication and authorization securely.
- D. Incorrect.
Rate limiting is essential for managing API usage and preventing abuse but does not directly handle centralized API access control.
- E. Correct.
Role-based access control (RBAC) allows granular permissions and ensures that API consumers only access the resources they are authorized for, which is essential for centralized access control.