Which Network Devices Secure API Platforms?

Why the Answer Is Correct

Web application firewalls (WAFs) are the only devices listed that operate at Layer 7 and can inspect, filter, and mitigate malicious traffic targeted at API endpoints. Cisco's Secure WAF specifically protects APIs by defending against OWASP Top Ten risks, bot attacks, and abuse. As comment [1] notes, Cisco Secure WAF and bot protection ensure that websites, mobile applications, and APIs are secure and 'always on.'

Why the Other Options Are Wrong

Content switches (A) mainly perform load balancing and traffic distribution at Layers 4–7 but do not focus on application-layer security inspection. Next-generation intrusion detection systems (C) monitor network traffic for known signatures but do not provide the API-specific protection like JSON validation, rate limiting, or credential stuffing prevention. Layer 3 transit network devices (D) are routers or switches that forward packets and lack any significant security inspection functionality.

The community comments fully support this reasoning. Comment [2] simply states 'Provided answer is correct,' and comment [3] agrees with B. The Cisco reference in comment [1] directly confirms that WAFs are the security devices for APIs.

Community Comment Notes

All three comments are consistent with the suggested answer B. Comment [1] provides authoritative vendor documentation explaining how WAFs secure APIs and web applications. Comment [2] and [3] reinforce the correctness of B without offering any alternative insight. The lack of dissent suggests this is a well-established concept in the exam blueprint, and candidates should be confident in this selection.