4.6 Determine the Constraints When Consuming APIs Such as Rate Limited, Timeouts, and Payload 350-201 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security operations team is integrating a threat intelligence API into a SIEM. The API has a rate limit of 10 requests per second and returns a 429 status with a Retry-After header when the limit is exceeded. The SIEM needs to query the API for each alert, and during peak hours, the SIEM generates 20 alerts per second. The team needs to ensure that all alerts are enriched without overwhelming the API. What should the team do?

   • AUse a different API endpoint that does not have rate limits.
   • BSend all alerts in a single batch request to reduce the number of API calls.
   • CIncrease the timeout on the API client to allow more requests per second.
   • DImplement a queue to buffer alerts and process them at a rate that does not exceed the API limit.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network engineer is integrating a Cisco API that retrieves device configuration. The API sometimes takes 20 seconds to respond, but the engineer's script has a timeout of 10 seconds. The script fails with a timeout exception, and the engineer needs to make the integration more reliable. What should the engineer do?

   • ADisable the timeout so the script waits indefinitely for the API to respond.
   • BChange the request method from GET to POST to speed up the response.
   • CReduce the timeout to 5 seconds to fail faster and retry more often.
   • DIncrease the client timeout to 30 seconds and add a retry with exponential backoff for timeout exceptions.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A DevOps engineer is integrating a vulnerability scanning API into a CI/CD pipeline. The API sometimes takes up to 30 seconds to respond, but the engineer notices that the integration fails intermittently with a timeout exception after 10 seconds. The engineer needs to ensure the integration waits long enough for the API to respond without hanging the pipeline indefinitely. What should the engineer do?

   • ASet the client timeout to 45 seconds and implement a retry with exponential backoff for timeout exceptions.
   • BReduce the timeout to 5 seconds and retry immediately on failure.
   • CIncrease the payload size limit on the client to allow larger responses.
   • DRemove the timeout entirely so the request waits as long as needed.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A script that calls a REST API receives a 429 response. The response includes a `Retry-After` header with a value of 30. What is the correct way to handle this response?

   • AImmediately retry the request with a different API key
   • BIncrease the request timeout to 30 seconds and retry
   • CIgnore the header and retry after 5 seconds
   • DWait 30 seconds before retrying the same request
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is using a public API to check IP reputation. The API documentation states that the rate limit is 100 requests per hour. The analyst's script makes 150 requests in an hour, and the API returns HTTP 429 for the last 50 requests. The analyst needs to ensure that all 150 IPs are checked. What should the analyst do?

   • AUse a different API key to bypass the rate limit.
   • BIncrease the timeout on the script to allow more requests per hour.
   • CWait for the rate limit window to reset and then retry the failed requests.
   • DChange the request method from GET to POST to avoid the rate limit.
   Reveal Solution Discussion Select an answer first