What is a main goal of authorization checks in API testing?

• A. To verify data accuracy
• B. To determine user interface responsiveness
• C. To ensure only authorized users have access
• D. To validate code performance

Answer: (C)

The main goal of authorization checks in API testing is to ensure that only authorized users have access to specific resources and functionalities within the application. This is essential for maintaining security and integrity in an API, as it prevents unauthorized access to sensitive data and operations. By validating authorization, testers can confirm that the API correctly enforces access control policies, safeguarding against potential security breaches and ensuring that users can only perform actions they are permitted to.

While verification of data accuracy, user interface responsiveness, and code performance are important aspects of API testing, they do not directly pertain to the purpose of authorization checks. These checks specifically focus on verifying the system's ability to restrict access based on defined user roles and permissions, which is crucial for secure application operation.