Which action is required to prevent API injection attacks?

API injection attacks exploit vulnerabilities by inserting malicious code into data inputs. The most effective preventative measure is to rigorously validate, filter, and sanitize all incoming data. This process ensures that only expected and safe data formats are processed, neutralizing malicious payloads before they can execute. Logging and monitoring failed attempts is reactive, helping detect attacks but not preventing them. Using password hashes with biometric authentication enhances user authentication but doesn't protect against API injection itself. Short-lived access tokens and authenticating applications improve overall API security and authorization but don't directly address the vulnerability of malicious data input.