MENU
What is a key requirement when creating an OpenAPI 3.0 API secured by basic authentication, API Key, or OAuth?
Suggested Answer: D
Get Premium C1000-138 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When creating an OpenAPI 3.0 API in IBM API Connect v10.0.3 that is secured by basic authentication, API Key, or OAuth, it is essential that the security-schema-name follows a specific pattern. This pattern is required to ensure proper validation and application of the security definitions according to the OpenAPI 3.0 specification. The security definitions help define the methods of authentication that are enforced for accessing the API endpoints, which is crucial for maintaining the API's integrity and security.
30 comments · newest first
DA
Danica
11 months ago
Agreed, headers are the way to go for authentication!
TO
Tora
11 months ago
Not sure about that strict pattern for security-schema-name.
OZ
Ozell
11 months ago
Definitely need an external security service for OAuth.
RA
Rashad
11 months ago
I thought you could pass it in the body too?
CA
Camellia
12 months ago
The relevant info goes in the header, that's a must!
RI
Ricarda
12 months ago
I vaguely remember that the API can be secured in different ways, but I don't think it has to be enforced by a specific gateway like Datapower.
KA
Katina
12 months ago
I practiced a question similar to this, and I feel like external services might be involved, but I don't think it's a strict requirement.
PA
Pamela
1 year ago
I think the relevant information for basic auth and API keys usually goes in the headers, but I can't recall if that's the only way.
BI
Billy
1 year ago
I remember something about how security schemes are defined in the OpenAPI spec, but I'm not sure if they have to follow a strict pattern.
KA
Kasandra
1 year ago
I'm pretty confident that the key requirement is that the API can only be enforced by a specific gateway, like Datapower API Gateway. That's what option C is saying, so I'll select that.
MI
Mitsue
1 year ago
The question mentions basic authentication, API Key, and OAuth, so I'm guessing the security-schema-name needs to follow a specific pattern. I'll go with option D to be safe.
NI
Nida
1 year ago
Hmm, I'm a bit confused about this one. I know we need to secure the API, but I'm not sure if an external security service is required or if there are other options. I'll have to think this through more carefully.
AN
Annette
1 year ago
I think the key requirement is that the relevant security information needs to be passed in the header, so I'll go with option B.
RO
Rosendo
2 years ago
C) The API can only be enforced by Datapower API Gateway. *Chuckles* Ah yes, the good old vendor lock-in. Because who doesn't love being tied to a single solution, right?
LI
Linsey
2 years ago
A) It needs an external security service. Ah, the classic 'outsource it' approach. Always a safe bet in the world of software development.
BE
Benton
2 years ago
A) It needs an external security service. Ah, the classic 'outsource it' approach. Always a safe bet in the world of software development.
GI
Gilberto
2 years ago
D) The security-schema-name must follow a strict pattern.
MA
Mabelle
2 years ago
B) The relevant information can only be passed in the header.
GE
Georgene
2 years ago
D) The security-schema-name must follow a strict pattern. Hmm, that sounds overly specific. I guess the OpenAPI folks really like their rules.
LA
Laila
2 years ago
A) It needs an external security service.
AR
Arminda
2 years ago
D) The security-schema-name must follow a strict pattern.
MI
Miriam
2 years ago
B) The relevant information can only be passed in the header.
CR
Cristy
2 years ago
A) It needs an external security service.
BE
Benedict
2 years ago
B) The relevant information can only be passed in the header. Seems legit, that's how I've seen it done in most APIs.
OC
Ocie
2 years ago
C) The API can only be enforced by Datapower API Gateway.
QU
Quinn
2 years ago
B) The relevant information can only be passed in the header.
AG
Agustin
2 years ago
A) It needs an external security service.
DO
Dortha
2 years ago
I'm not sure about that. I think the security-schema-name must follow a strict pattern for proper authentication.
JO
Josephine
2 years ago
I agree with Naomi. It's important for security reasons to pass the information in the header.
NA
Naomi
2 years ago
I think the key requirement is that the relevant information can only be passed in the header.