300-915 practice - PrepKeys

Q4 Multiple choice

As part of an IoT project, an organization is developing an application that will share multiple clients using a REST API.

Based on the software development process, what are two valid technical activities that can be suggested to secure the REST API that is developed during the development of the software? (Choose two.)

Select all that apply.

A
Respond to request failures in detail to allow users for easier troubleshooting.
B
Implement HTTP whitelisting to only methods that are allowed.
C
Implement and review audit logs for security-related events.
D
Reject HTTP methods that are invalid with an error code 404.
E
Implement physical firewalling and access control to the resources.