What is the concept that allows an API client to explore an API via links embedded in payloads?
hypermedia link relations parsing browsing
Which response header will tell the client that the response is cached for 1 minute?
Expires: 1 minute Cache-Control: max-age=60 Expires: 1 January 2020 Cache-Expires: max-age=60
API testing must be treated as ______?
red team testing white box testing blue box testing black box testing
Which is a benefit of using an API gateway?
HTTP verbs JSON payloads HTTP response codes rate limiting/throttling
What is the best approach for requesting JSON instead of XML from an API?
Add .json to the URL. APIs do not use XML. Use the Content-Type header. Use the Accept header.
API traffic that is entirely internal to your organisation is normally called ____?
inbound traffic north-south traffic internal traffic east-west traffic
Within Oauth, what component validates the user’s identity?
client not specified authorization server resource server
Which is the most secure method to transmit an API key?
URL parameter Authorization header Base64 encoding Basic Auth