4.6 Determine the Constraints When Consuming APIs Such as Rate Limited, Timeouts, and Payload 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An API client receives an HTTP 429 status code along with a `Retry-After` header. What does the `Retry-After` header indicate?

   • AThe time when the API key will expire and require rotation
   • BThe time the client should wait before making the next request to avoid another 429
   • CThe total number of requests allowed per day for the API key
   • DThe number of requests the client has remaining in the current rate limit window
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An API expects request payloads in JSON format. What is a common constraint that API providers enforce regarding payloads?

   • APayloads must include a timestamp in every field
   • BA minimum payload size of 1 KB
   • CA maximum payload size, such as 1 MB
   • DPayloads must be encrypted with AES-256
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A developer is integrating a security orchestration API that accepts JSON payloads. The API documentation provides a JSON schema for the request body. When the developer sends a payload with an extra field that is not in the schema, the API returns a 400 Bad Request with an error message. The developer needs to ensure that future requests are accepted. What should the developer do?

   • AIncrease the timeout on the client to allow more time for validation.
   • BAdd a 'Content-Type: text/plain' header to the request.
   • CRetry the request with exponential backoff.
   • DRemove the extra field from the payload before sending the request.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is writing a script to pull a large list of indicators of compromise (IOCs) from a threat feed API. The API documentation states that the maximum response payload is 1 MB and that responses are paginated with a 'next' link. The analyst needs to retrieve all IOCs without hitting the payload limit. What should the analyst do?

   • AIncrease the client-side timeout to allow the API to send a larger payload.
   • BFollow the 'next' link in each response until all pages are retrieved.
   • CRequest the API to return the data in XML format to reduce the payload size.
   • DSend a request with a larger 'page_size' parameter to get all IOCs in one response.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security analyst is using a SIEM API to query for recent alerts. The API returns HTTP 200 with an empty JSON array. The analyst expects to see alerts but the response contains none. What is the most likely cause?

   • AThe payload was too large and the API truncated the response.
   • BThe query parameters are correct, but there are no alerts matching the filter criteria.
   • CThe API rate limit was exceeded, and the API returned an empty response instead of a 429.
   • DThe API timed out and returned an empty response.
   Reveal Solution Discussion Select an answer first