🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A payments microservice hosted on AWS Lambda must call a private REST API published through Amazon API Gateway. Security requirements state that the API must be able to (1) confirm that each request really originated from an authorized Lambda function and (2) ensure the calling function cannot later deny having sent a specific payment instruction. Which approach BEST meets both requirements with minimal operational overhead?

  • Enable mutual TLS between the Lambda function and API Gateway and restrict the API to the Lambda's VPC CIDR range.

  • Have the Lambda function call AWS KMS Sign with its own RSA private key to create a digital signature over each request payload and send the signature along; the API verifies the signature with the corresponding public key.

  • Include an HMAC of the request body in a custom HTTP header, using a shared secret retrieved at runtime from AWS Secrets Manager.

  • Require the Lambda to present an API key generated by API Gateway in each request and rotate the key every 30 days.

ISC2 Systems Security Certified Practitioner (SSCP)
Cryptography
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot