SOFTWARE ENGINEERING TOOLS AND ENVIRONMENTS
AUTOMATED TESTING TOOLS
|
Question
[CLICK ON ANY CHOICE TO KNOW THE RIGHT ANSWER]
|
|
|
Relying on the security of the underlying transport layer (e.g. HTTPS)
|
|
|
Storing sensitive data in plain text within the API
|
|
|
Using a combination of authentication, authorization, and encryption to secure the API
|
|
|
Disabling all security measures to improve performance
|
Detailed explanation-1: -At the very least you should use an API key (asymmetric key) or basic access authentication (user/password) to increase the difficulty of hacking your system. But you should consider using OAuth 2 as your protocol of choice for a robust security of your APIs.
Detailed explanation-2: -Always use TLS Every web API should use TLS (Transport Layer Security). TLS protects the information your API sends (and the information that users send to your API) by encrypting your messages while they’re in transit. You might know TLS by its predecessor’s name, SSL.
Detailed explanation-3: -Basic authentication is an HTTP-based authentication approach and is the simplest way to secure REST APIs. It uses a Base64 format to encode usernames and passwords, both of which are stored in the HTTP header.