Why API security is non-negotiable in Rest API - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why is API security critical for businesses?

APIs connect different software systems and share data. Why is it important to keep APIs secure?

A Because API security slows down the system and should be avoided.

B Because APIs are only used internally and do not affect external users.

C Because APIs do not handle any important data.

D Because unsecured APIs can expose sensitive data and allow unauthorized access.

💡 Hint

Think about what happens if someone bad gets access to your API.

APIs often handle sensitive data and control important functions. If they are not secure, attackers can steal data or disrupt services.

❓ Predict Output

intermediate

What is the output of this API authentication check?

Consider this simplified Python code snippet checking an API key:

def check_api_key(key):
    valid_keys = ['abc123', 'def456']
    if key in valid_keys:
        return 'Access granted'
    else:
        return 'Access denied'

print(check_api_key('xyz789'))

What will this print?

A Access denied

B Access granted

C Key error

D None

💡 Hint

Is 'xyz789' in the list of valid keys?

The key 'xyz789' is not in the list, so the function returns 'Access denied'.

🔧 Debug

advanced

Identify the security flaw in this API token validation code

Look at this code snippet that validates an API token:

def validate_token(token):
    if token == None:
        return False
    if token == '':
        return False
    return True

print(validate_token(''))

What is the problem with this validation?

A It raises a syntax error due to missing colon.

B It incorrectly allows empty strings as valid tokens.

C It correctly rejects empty tokens.

D It raises a TypeError because of wrong comparison.

💡 Hint

Check what happens when the token is an empty string.

The code returns False for empty strings and None, so it correctly rejects invalid tokens.

📝 Syntax

advanced

Which option causes a syntax error in API request handling?

Which of these Python code snippets will cause a syntax error when handling an API request?

A response = requests.get('https://api.example.com/data')

B if response.status_code == 200 print('Success')

C data = response.json()

D print(data['result'])

💡 Hint

Look for missing punctuation or keywords in the if statement.

Option B is missing a colon after the if condition, causing a syntax error.

🚀 Application

expert

What is the number of items in the secured API response dictionary?

Given this Python code simulating an API response with security filtering:

response = {'user': 'alice', 'password': 'secret', 'token': 'abc123'}
secured_response = {k: v for k, v in response.items() if k != 'password'}
print(len(secured_response))

What number will be printed?

A 2

B 3

C 1

D 0

💡 Hint

Count keys except 'password'.

The original dictionary has 3 keys. The comprehension removes 'password', leaving 2 keys.