easyMultiple ChoiceObjective-mapped
CAS-004 Practice Question: Deploying a RESTful API that handles sensitive…
A company is deploying a RESTful API that handles sensitive financial data. Which of the following should be implemented to ensure data integrity during transmission?
⚠ Common exam trap
Test-takers frequently confuse application-layer integrity mechanisms (like JWT signatures or input validation) with transport-layer integrity, which is specifically provided by TLS to protect data in transit against network-level tampering.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TLS 1.3
TLS 1.3 ensures data integrity during transmission by providing transport-layer encryption with authenticated encryption (AEAD), which guarantees that any tampering with the ciphertext will be detected upon decryption. For a RESTful API handling sensitive financial data, TLS 1.3 is the correct choice because it protects the entire HTTP payload in transit, preventing man-in-the-middle attacks from modifying or replaying data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
TLS 1.3
Why this is correct
TLS encrypts the entire session and ensures data integrity via MACs.
- ✗
Input validation
Why it's wrong here
Input validation prevents injection attacks but does not protect data in transit.
- ✗
JSON Web Token (JWT) authentication
Why it's wrong here
JWT is for stateless authentication, not for protecting data during transmission.
- ✗
API rate limiting
Why it's wrong here
Rate limiting controls request volume, not data integrity.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.