Which two security practices are recommended to protect REST APIs?

Using SSL/TLS (Secure Sockets Layer/Transport Layer Security) for encryption is crucial because it encrypts the data exchanged between the client and the API server, protecting sensitive information from eavesdropping and tampering during transit. This ensures confidentiality and integrity. Using a password hash is essential for storing user credentials securely. Instead of storing plain-text passwords, which could be compromised if the database is breached, hashing converts the password into an irreversible string. This protects user accounts even if the hashed passwords are stolen. Dual authentication and out-of-band authentication are strong security measures but are generally used for user login sessions, not directly for protecting the API itself in terms of data transport or credential storage. TACACS+ is an authentication protocol primarily used for device administration, not typically for securing REST API communication.