4.6 Determine the Constraints When Consuming APIs Such as Rate Limited, Timeouts, and Payload 350-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A developer is consuming a security API that returns JSON responses. The API documentation specifies that the 'status' field can be either 'active' or 'inactive'. In a response, the developer receives a 'status' field with the value 'pending'. The developer's code currently treats any value other than 'active' as 'inactive'. What is the best practice for handling this unexpected field value?

   • AIgnore the 'status' field and use a default value.
   • BRetry the request to see if the API returns a different value.
   • CTreat 'pending' as 'inactive' because it is not 'active'.
   • DLog the unexpected value and handle it as an error or unknown state.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security analyst is using a SIEM API to query for recent alerts. The API returns HTTP 429 with a Retry-After header of 30 seconds. The analyst's script currently retries immediately on 429, which causes more 429 responses. The analyst needs to ensure that the script eventually retrieves the alerts. What should the analyst do?

   • ARespect the Retry-After header and wait the specified time before retrying.
   • BUse a different API key to bypass the rate limit.
   • CChange the request method from GET to POST to avoid the rate limit.
   • DIncrease the timeout on the HTTP client to 60 seconds.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An API client is configured with a timeout of 5 seconds. The API typically responds in 2 seconds, but under heavy load it sometimes takes 8 seconds. What is the most appropriate action to reduce timeout-related failures?

   • ARemove the timeout entirely to avoid any failures
   • BKeep the timeout at 5 seconds and retry immediately on timeout
   • CSet the timeout to 2 seconds to match the typical response time
   • DIncrease the timeout value to a value that accommodates the worst-case response time
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A Python script uses the `requests` library to call an external API. The developer wants to ensure the script does not hang indefinitely if the API does not respond. What is the purpose of setting a timeout on the HTTP request?

   • ATo limit the number of requests sent per minute
   • BTo automatically retry the request if the server returns a 500 error
   • CTo compress the request payload to reduce bandwidth usage
   • DTo define the maximum time the client will wait for a response before giving up
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An automation script is being throttled by an API that returns 429 responses. The developer wants to implement a retry strategy that gradually increases the wait time between attempts. Which technique is designed for this purpose?

   • AExponential backoff
   • BPayload compression
   • CLoad balancing
   • DCircuit breaker pattern
   Reveal Solution Discussion Select an answer first