CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ169

VerifiedCommunication and Network Security

When reviewing a web application-to-application connection, a security professional observes that it uses Representational State Transfer (REST) application programming interfaces (APIs) and determines that it is secure. Which of the following connection Uniform Resource Locators (URLs) applies to this situation?

Explanation

A secure REST API endpoint uses HTTPS to protect data in transit and follows a resource-oriented path. Credentials such as API keys should not be included in the URL query string because URLs can be recorded or exposed in logs and related metadata.

Community Discussion

No comments yet. Be the first to start the discussion!