thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Improper Inventory Management

API9:2023, failure to track API hosts, versions and endpoints, leaving old, debug or undocumented APIs exposed.

Definition

Old API versions often lack newer security fixes, and shadow or zombie APIs escape monitoring. Mitigations include an API inventory, OpenAPI documentation, retirement plans for old versions, API gateways and discovery tooling.

Example

api.example.com/v1, retired in documentation, still runs and lacks the rate limiting added to v3.

Exam tip

Know the terms shadow API (undocumented) and zombie API (deprecated but still running).

Related terms