API Design · Senior · Question 29 of 75
What does OWASP API6:2023 (Unrestricted Access to Sensitive Business Flows) warn about?
- ✓Correct answer: Flows like buying limited items, creating accounts or posting reviews that can be automated at scale to harm the business
- 2Weak TLS ciphers
- 3Large JSON responses
Explanation
Mitigations include device fingerprinting, CAPTCHAs for humans, per-account limits and anomaly detection.