Which method ensures the confidentiality of data exchanged over a REST API?

Use TLS to secure the underlying HTTP session.

Use me POST method Instead or URL-encoded GET to pass parameters.

Deploy digest-based authentication to protect the access to the API.

Encode sensitive data using Base64 encoding.