Fill in the blank: ___ create a string of letters and numbers that act as a password for the account and approve a given request.

In the HubSpot Data Integration certification, private apps is the correct answer because they generate a unique access token—a long string of alphanumeric characters—that functions as a secure "password" to authorize API requests for a single HubSpot portal. Unlike OAuth, which is designed for multi-portal public apps and involves a complex handshake process with rotating tokens, a private app provides a straightforward way for developers to authenticate server-to-server integrations. This token is included in the authorization header of an HTTP request, signaling to HubSpot that the request is approved and has the specific permission scopes required to interact with that account's data.