mediumMultiple SelectObjective-mapped
200-901 Practice Question: Implementing an API gateway for its microservices
A company is implementing an API gateway for its microservices. Which TWO security features should be enabled at the gateway to protect backend services?
⚠ Common exam trap
Cisco often tests the distinction between security features that protect the API layer (JWT validation, rate limiting) versus network-level or backend-specific features (DPI, connection pooling), leading candidates to confuse operational optimizations with security controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
JWT validation.
JWT validation at the API gateway ensures that only requests with valid, unexpired, and properly signed JSON Web Tokens are forwarded to backend microservices. This offloads authentication and token verification from individual services, enforcing a consistent security boundary and preventing unauthorized access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
In-depth packet inspection.
Why it's wrong here
In-depth packet inspection operates at OSI Layer 7 to analyse payload content, but the question asks for security features at the API gateway, which typically enforces authentication, rate limiting, or token validation—not deep payload analysis. It is tempting because packet inspection can detect malicious payloads in a web application firewall context, where it would be correct for blocking SQL injection or XSS at the network perimeter.
- ✗
Database connection pooling.
Why it's wrong here
Performance feature, not security.
- ✓
JWT validation.
Why this is correct
Authenticates API requests.
- ✗
CORS configuration.
Why it's wrong here
Related to browser security, not backend protection.
- ✓
Rate limiting.
Why this is correct
Prevents DoS and abuse.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.