CAS-004 Security Architecture Practice Question
Which of the following best describes the security benefit of using an API gateway in a microservices architecture?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It enforces security policies such as authentication and rate limiting centrally
An API gateway provides a centralized point for enforcing security policies like authentication, rate limiting, and input validation. This reduces the attack surface by offloading these responsibilities from individual services. Option A is incorrect because input validation is still needed at the service level for defense-in-depth. Option B is incorrect because encryption is typically handled by TLS, not solely the gateway. Option D is incorrect because load balancing is a traffic management function, not a direct security benefit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It eliminates the need for input validation in individual microservices
Why it's wrong here
Input validation should still be implemented at each service; the gateway adds a layer but does not eliminate the need.
- ✗
It encrypts all data between the client and server using mTLS
Why it's wrong here
mTLS can be used but is not automatically provided by all API gateways; encryption is typically TLS.
- ✓
It enforces security policies such as authentication and rate limiting centrally
Why this is correct
The gateway centralizes cross-cutting security concerns, providing a single enforcement point.
- ✗
It automatically load balances traffic to ensure high availability
Why it's wrong here
Load balancing is a common feature but not a primary security benefit.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.