1. Which is a benefit of using an API gateway?

2. Which is an example of Code on Demand?

3. Which is the most secure method to transmit an API key?

4. What would you enable to allow a browser on another site to make an AJAX request to your API?

5. APIs commonly use webhooks to '\_'.

6. Which content is best to include in your documentation?

7. When building SDKs, which languages should you support?

8. What is the purpose of a link relation?

9. When dealing with JSON web Tokens (JWTs), what is a claim?

10. What is one benefit of GraphQl over REST approaches?

11. Which HTTP response code usually means the requested work is still processing and may or may not result in an error later?

12. Which REST constraint specifies that there should be no shared context?

13. When validating a JWT, what are some of the claims that you must confirm? (Select all that apply.)
A. The exp (expiration) has not passed.
B. The algorithm is sufficient.
C. The signature matches the payload.
D. The token was Base64 encoded.
E. The iss (issuer) is the auth server you expect.
F. There is a refresh token.
G. The cid (client ID) is the client you expect.
H. The token was encrypted.

14. What is the concept that allows an API client to explore an API via links embedded in payloads?

15. Which URL pattern is recommended when working with one resource and a collection of resources?

16. The ability to execute the same API request over and over again without changing the resource's state is an example of \_.

17. What is the purpose of an OAuth refresh token?

18. If you were to add versioning by using the Accept and Content-Type header, what would be the correct format of the header value?

19. What purpose does a User-Agent serve?

20. Using OAuth, what scope would you request for write access to the API?

21. What should your API documentation describe?

22. When a user attempts to access a record that is not their own, which HTTP response code is the most appropriate?

23. Which HTTP verb is used in a CORS preflight request?

24. Which HTTP verb is normally used to update or create a resource in an API?

25. Your API resource does no allow deletion, and a client application attempted to delete the resource. What HTTP response code should you return?