Application Security Design →hardMultiple ChoiceObjective-mapped

SDSI Application Security Design Practice Question

When designing an API security strategy using Cisco API Security, how should you address APIs that are currently using legacy authentication?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Use an API gateway to terminate modern authentication and proxy to the legacy backend

You should use an API gateway to 'wrap' the legacy API, enforcing modern authentication (like OIDC/OAuth) at the gateway layer while the backend continues to use legacy auth.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Force the legacy backend to support modern OAuth
Why it's wrong here
Legacy backends often cannot be updated to support modern protocols.
✗
Block all access to legacy APIs immediately
Why it's wrong here
This would break the business applications.
✓
Use an API gateway to terminate modern authentication and proxy to the legacy backend
Why this is correct
This is the standard design for modernizing legacy API access.
✗
Ignore the legacy APIs as they are 'trusted'
Why it's wrong here
Legacy APIs are often the most vulnerable and must be protected.

About these practice questions

Courseiva writes every SDSI question from scratch — 298 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Cisco exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Timed practice sets

Short scored sets — answer, get feedback, read the explanation, move on.

SDSI Practice Test 1 — 25 Questions→SDSI Practice Exam 2 — 20 Questions→

Study by exam domain

Drill one exam section at a time instead of jumping between unrelated topics.

Application Security Design Secure Infrastructure Design Risk Events And Requirements

Practice by question type

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios

Practice by topic

One concept per page — questions, worked explanations, and a short concept guide.

Application Security Design practice questions SDSI troubleshooting practice questions Risk Events And Requirements practice questions SDSI scenario practice questions Secure Infrastructure Design practice questions

Where to go next

All Cisco practice questions All SDSI questions Exam domains

This SDSI practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SDSI exam.