Question

A network automation team is integrating a Python script with a Cisco Catalyst Center REST API. During a security review, an auditor notes that API credentials and returned device inventory data must not be readable if the traffic is captured on the wire. Which characteristic of REST API security addresses this specific requirement?

Accepted Answer

REST APIs rely on HTTPS (HTTP over TLS) to encrypt the entire request and response payload in transit

Answer

REST APIs use HTTP basic authentication headers, which hash the credentials so they cannot be read

Answer

REST APIs enforce rate limiting to prevent packet capture of the session data

Answer

REST APIs use JSON encoding, which obfuscates the payload so sniffed data is unreadable