CompTIA CASP+ (CAS-004) — Question 385

An application engineer is using the Swagger framework to leverage REST APIs to authenticate endpoints. The engineer is receiving HTTP 403 responses. Which of the following should the engineer do to correct this issue? (Choose two.)

Answer options

Correct answer: A, D

Explanation

Obtaining a security token (Option A) is necessary to authenticate the request and gain access, while leveraging OAuth (Option D) is a common method for handling authorization. The other options, such as a public key or Kerberos, may not be applicable or sufficient for resolving the HTTP 403 status, which indicates a lack of permission rather than an authentication issue.