An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?

Question

An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.

The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.

What out-of-the-box Anypoint Platform policy can address exposure to this threat?

Nghia To Duc · Accepted Answer

Apply a JSON threat protection policy to all APIs to detect potential threat vectors

Nghia To Duc · Answer

Shut out bad actors by using HTTPS mutual authentication for all API invocations

Nghia To Duc · Answer

Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors

Nghia To Duc · Answer

Apply a Header injection and removal policy that detects the malicious data before it is used

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 22 - Certified MuleSoft Developer I discussion

Suggested answer: D

0 comments