Question 530
A REST client needs filtering on a public product type but must never filter private margin columns. Which preventive practice BEST addresses the underlying risk over time?
Explanation
Correct Answer
Audit API surface after schema changes. This guards against recurrence because DAB entity projection and permissions determine the API data surface. The direct remediation is: Configure entity fields, authorization and supported filter behavior to expose only permitted fields.
Incorrect Answers
Use consistent ordering and monitor costly filters. The current task instead requires this action: audit API surface after schema changes.
Block accidental production connection strings in repository review. The current task instead requires this action: audit API surface after schema changes.
Automate image and configuration validation in CI. The current task instead requires this action: audit API surface after schema changes.