API Gateway Security Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption in Transit

What you'll be asked

  1. Which protocol is the industry standard for securing data in transit between a client and an API Gateway?
  2. When configuring an API Gateway, why is it necessary to enforce a minimum TLS version of 1.2 or higher?
  3. What is the primary function of an SSL/TLS certificate when an API Gateway receives an incoming request?
  4. If an API Gateway is configured to accept both HTTP and HTTPS requests, what is the most significant security risk?
  5. In a scenario where the API Gateway acts as a reverse proxy to a backend service, what does 'End-to-End Encryption' imply?

Answers and explanations come after you submit.