Question 170
At the Cedarport online learning platform, an inventory script retrieves only the first page of Cisco security events and reports full coverage. What risk should the team identify as the primary issue?
Explanation
Correct Answer
The evidence indicates that paginated REST APIs omit later records if callers stop after page one. The appropriate response is to follow documented pagination or continuation tokens until a bounded complete result is obtained and demonstrate that a test collection retrieves all expected items exactly once.
Incorrect Answers
The offered action is: Tokens in URL parameters can leak through history and intermediary access logs. It is associated with this separate technical condition: Tokens in URL parameters can leak through history and intermediary access logs. The actual incident concerns a different dependency: Paginated REST APIs omit later records if callers stop after page one. The corresponding change is: Paginated REST APIs omit later records if callers stop after page one.
Relayable passwords and one-time codes can be replayed by an adversary in real time. That may occur elsewhere, but the evidence at the Cedarport online learning platform instead points to the fact that paginated REST APIs omit later records if callers stop after page one.
Network location is not sufficient proof of entitlement to sensitive records. That is not the mechanism that accounts for the stated failure at the Cedarport online learning platform.