API Testing · Middle · Question 44 of 75
Why might GraphQL introspection be disabled in production?
- 1It shows the full schema, helping attackers explore
- 2It makes every single query several times slower
- 3It returns user passwords in the response
Show the answer
Correct answer: It shows the full schema, helping attackers explore
Explanation
Introspection is useful in development. Testers check the production setting matches the team's security policy.