General REST API MCQs

1. What type of relationship is defined as one resource existing only if another parent resource exist-for example, pages in a book?

2. Which URL pattern is recommended when working with one resource and a collection of resources?

3. When dealing with JSON web Tokens (JWTs), what is a claim?

4. Which REST constraint specifies that knowledge and understanding obtained from one component of the API should be generally applicable elsewhere in the API?

5. What would you enable to allow a browser on another site to make an AJAX request to your API?

6. APIs commonly use webhooks to _.

7. What is the underlying goal of all APIs?

8. Which is a common command-line tool for using or exploring an API?

9. What is the modern specification for describing an API?

10. Which HTTP verb is normally used to update or create a resource in an API?

11. What is one benefit of server-side caching in APIs?

12. Your API resource does no allow deletion, and a client application attempted to delete the resource. What HTTP response code should you return?

13. What is OpenID Connect?

14. What is one benefit of GraphQl over REST approaches?

15. Which REST constraint specifies that there should be no shared context?

16. What purpose does a User-Agent serve?

17. If you were to add versioning by using the Accept and Content-Type header, what would be the correct format of the header value?

18. What is one benefit that OAuth provides over an API key approach?

19. The ability to execute the same API request over and over again without changing the resource's state is an example of _.

20. What component can you use to wrap legacy architectures or protocols into a REST interface for easier consumption and integration?

21. What protection does a JSON Web Token (JWT) offer to mitigate tampering with its contents?

22. What OAuth term is used to represent permissions?

23. What additional type of token would you see when using OpenID Connect?

24. What should you add to a Cache-Control response header to specify that a response should not be stored in an intermediary cache?

25. Which OAuth grant type can support a refresh token?

26. Using OAuth, what scope would you request for write access to the API?

27. Which property would you use to include subresources directly into a JSON document?

28. What is the best way to track SDK and version usage?

29. Which REST constraint allows for the presence of caching, routing, and other systems between the client and server?

30. Which content is best to include in your documentation?

31. What metric tracks overall availability for your API?

32. What is the recommended method and URL pattern for retrieving a specific user?

33. What is the purpose of a link relation?

34. When building SDKs, which languages should you support?

35. Which property would you use to include references to other resources in a JSON document?

36. What is OAuth?

37. What should your API documentation describe?

38. What is the purpose of an OAuth refresh token?

39. What is Time to First Hello World?

40. Which response header tells the client and intermediaries that the response is not to be cached anywhere?

41. What component hides the distinctions or boundaries between various microservices from end-client applications?

42. The textbook approach to api versioning is to use _.

43. Which is the most secure method to transmit an API key?

44. Within Oauth, what component validates the user's identity?

45. API traffic that is entirely internal to your organization is normally called _?

46. What is the best approach for requesting JSON instead of XML from an API?

47. When a user attempts to access a record that is not their own, which HTTP response code is the most appropriate?

48. Which is a benefit of using an API gateway?

49. API testing must be treated as _?

50. Which HTTP verb is used in a CORS preflight request?

51. Which response header will tell the client that the response is cached for 1 minute ?

52. What is the concept that allows an API client to explore an API via links embedded in payloads?

53. Which HTTP response code describes a new resource as created successfully?

54. Which is an example of Code on Demand?

55. Which URL pattern should you follow for accessing a subresource attached to a specific resource?

56. Which REST constraint essentially prohibits the use of cookies?

57. Which HTTP verb is used to delete a resource?

58. Which verb is not considered idempotent?

59. Which REST constraint specifies that each request should stand on its own and not have a specific required order?

60. When you get a 429 code, what should you do next?

61. When exploring record sets, what is the best approach for pagination?

62. What is not a method for API authentication or authorization?

63. Which HTTP response code usually means the requested work is still processing and may or may not result in an error later?