API Testing · Senior · Question 28 of 75
Why check API logs for personal data in tests?
- 1Tokens and personal data in logs are a leak and a compliance risk
- 2Logging personal data makes the API respond more slowly
- 3Logs with personal data make debugging impossible
Show the answer
Correct answer: Tokens and personal data in logs are a leak and a compliance risk
Explanation
A test can call an endpoint with a known marker value and search the logs for it, catching unmasked emails or tokens.