Exam CAS-004 All QuestionsBrowse all questions from this exam
Question 404

A security administrator is trying to securely provide public access to specific data from a web application. Clients who want to access the application will be required to:

• Only allow the POST and GET options.

• Transmit all data secured with TLS 1.2 or greater.

• Use specific URLs to access each type of data that is requested.

• Authenticate with a bearer token.

Which of the following should the security administrator recommend to meet these requirements?

    Correct Answer: A

    An API gateway is the best solution to meet the requirements of securely providing public access to specific data from a web application. It can enforce the use of specific HTTP methods such as POST and GET, ensure that all data is transmitted securely using TLS 1.2 or greater, route requests to specific URLs, and handle authentication with bearer tokens.

Discussion
MacherGamingOption: A

A - API Gateway

041ba31Option: A

The best answer is A. API gateway. An API gateway can enforce the use of POST and GET methods, ensure TLS 1.2 or greater is used for secure transmission, route requests to specific URLs, and manage authentication with bearer tokens.

loucrassOption: A

API gateway