API Testing · Middle · Question 48 of 75

Why add security header checks to API tests?

1Security headers make API responses load faster
2Missing headers like HSTS or nosniff weaken protection
3Clients refuse responses that have no security headers

Show the answer

Correct answer: Missing headers like HSTS or nosniff weaken protection

Explanation

Simple checks for Strict-Transport-Security, X-Content-Type-Options and CORS settings catch configuration regressions.

Further reading

Test yourself

Take the API Testing · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.