Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 16 results · Page 13 for “api”.

Mini-lessons

SNOWPRO-SEC · Cloud security

Cloud security follows the data and identities

…plication. Worked example An application needs a cloud API credential while running. Which approach minimizes stored long-lived secrets? Use a workload identity with short-lived credentials …

SW-TECH-MASTER · Security architecture

Place controls at trust boundaries

…igate and contain problems. Worked example An internal API trusts any request from the corporate subnet. Which design improvement best protects individual records? Authenticate callers and a…

Security+ · Security Architecture

Data states: at rest, in transit, in use

← PreviousPage 13

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

… session is a data-in-transit problem, and a memory-scraping malware sample is a data-in-use problem. Exam questions often describe the loss scenario and expect you to pick the matching cont…

SecurityX · Cloud security

Cloud security follows the data and identities

…plication. Worked example An application needs a cloud API credential while running. Which approach minimizes stored long-lived secrets? Use a workload identity with short-lived credentials …

SecurityX · Security architecture

Place controls at trust boundaries

…igate and contain problems. Worked example An internal API trusts any request from the corporate subnet. Which design improvement best protects individual records? Authenticate callers and a…

THM-PT1 · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…

THM-WEB1 · Security-focused code review

Trace untrusted input to the sensitive operation

… an unsafe operation, or the operation must use a safe API.

THM-WEB1 · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…

VAULT-ADV · Cloud security

Cloud security follows the data and identities

…plication. Worked example An application needs a cloud API credential while running. Which approach minimizes stored long-lived secrets? Use a workload identity with short-lived credentials …

VAULT-ASSOC · Cloud security

Cloud security follows the data and identities

…plication. Worked example An application needs a cloud API credential while running. Which approach minimizes stored long-lived secrets? Use a workload identity with short-lived credentials …

eCPPT · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…

eJPT · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…

eWPT · Security-focused code review

Trace untrusted input to the sensitive operation

… an unsafe operation, or the operation must use a safe API.

eWPT · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…

eWPTX · Security-focused code review

Trace untrusted input to the sensitive operation

… an unsafe operation, or the operation must use a safe API.

eWPTX · Web assessment reasoning

Web assessment reasoning

…vider's current objectives. Worked example A permitted API test finds that GET /documents/42 is denied to a second tenant, while PATCH /documents/42 succeeds. What does this establish? Autho…