IBM C1000-138 Exam - Topic 2 Question 7 Discussion

Actual exam question for IBM's C1000-138 exam

Question #: 7
Topic #: 2

[All C1000-138 Questions]

What is a key requirement when creating an OpenAPI 3.0 API secured by basic authentication, API Key, or OAuth?

AIt needs an external security service.

BThe relevant information can only be passed in the header.

CThe API can only be enforced by Datapower API Gateway.

DThe security-schema-name must follow a strict pattern.

Show Suggested Answer

Suggested Answer: D

When creating an OpenAPI 3.0 API in IBM API Connect v10.0.3 that is secured by basic authentication, API Key, or OAuth, it is essential that the security-schema-name follows a specific pattern. This pattern is required to ensure proper validation and application of the security definitions according to the OpenAPI 3.0 specification. The security definitions help define the methods of authentication that are enforced for accessing the API endpoints, which is crucial for maintaining the API's integrity and security.

IBM API Connect v10.0.3 Now Available

IBM API Connect Support Lifecycle Policy

by Dexter at Sep 16, 2024, 05:08 PM

Limited Time Offer

25%

Off

Get Premium C1000-138 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Danica

3 months ago

Agreed, headers are the way to go for authentication!

upvoted 0 times

...

Tora

3 months ago

Not sure about that strict pattern for security-schema-name.

upvoted 0 times

...

Ozell

3 months ago

Definitely need an external security service for OAuth.

upvoted 0 times

...

Rashad

4 months ago

I thought you could pass it in the body too?

upvoted 0 times

...

Camellia

4 months ago

The relevant info goes in the header, that's a must!

upvoted 0 times

...

Ricarda

4 months ago

I vaguely remember that the API can be secured in different ways, but I don't think it has to be enforced by a specific gateway like Datapower.

upvoted 0 times

...

Katina

4 months ago

I practiced a question similar to this, and I feel like external services might be involved, but I don't think it's a strict requirement.

upvoted 0 times

...

Pamela

4 months ago

I think the relevant information for basic auth and API keys usually goes in the headers, but I can't recall if that's the only way.

upvoted 0 times

...

Billy

5 months ago

I remember something about how security schemes are defined in the OpenAPI spec, but I'm not sure if they have to follow a strict pattern.

upvoted 0 times

...

Kasandra

5 months ago

I'm pretty confident that the key requirement is that the API can only be enforced by a specific gateway, like Datapower API Gateway. That's what option C is saying, so I'll select that.

upvoted 0 times

...

Mitsue

5 months ago

The question mentions basic authentication, API Key, and OAuth, so I'm guessing the security-schema-name needs to follow a specific pattern. I'll go with option D to be safe.

upvoted 0 times

...

Nida

5 months ago

Hmm, I'm a bit confused about this one. I know we need to secure the API, but I'm not sure if an external security service is required or if there are other options. I'll have to think this through more carefully.

upvoted 0 times

...

Annette

5 months ago

I think the key requirement is that the relevant security information needs to be passed in the header, so I'll go with option B.

upvoted 0 times

...

Rosendo

1 year ago

C) The API can only be enforced by Datapower API Gateway. *Chuckles* Ah yes, the good old vendor lock-in. Because who doesn't love being tied to a single solution, right?

upvoted 0 times

...