350-401 Question 259
Select 3An enterprise network engineer is tasked with designing a secure REST API implementation for a network automation solution. Which two measures should the engineer include to ensure REST API security?
- A
Use HTTPS to encrypt API communication.
- B
Implement IP whitelisting to restrict access.
- C
Store API keys in plaintext within the client application.
- D
Use basic authentication without encryption for user credentials.
- E
Add rate limiting to the API.
Show answer and explanation
Correct answers: A, B, E
Explanation
REST API security involves implementing measures to protect the API from unauthorized access, data breaches, and abuse. Using HTTPS ensures encrypted communication, IP whitelisting restricts access to trusted clients, and rate limiting prevents misuse of API resources. On the other hand, storing API keys in plaintext and using basic authentication without encryption are insecure practices that expose sensitive data to potential threats.
- A. Correct.
Using HTTPS ensures that the communication between the client and the server is encrypted, protecting sensitive data such as API keys, tokens, and user credentials.
- B. Correct.
IP whitelisting allows administrators to restrict access to the API, ensuring that only requests from trusted IP addresses are permitted.
- C. Incorrect.
Storing API keys in plaintext is insecure because if the client application is compromised, an attacker can easily retrieve and misuse the API keys.
- D. Incorrect.
Basic authentication without encryption is insecure because credentials are transmitted in plaintext, making them vulnerable to interception during transmission.
- E. Correct.
Adding rate limiting helps protect the API from abuse, such as denial-of-service (DoS) attacks, by controlling the number of requests a client can make in a specific timeframe.