4.6 Determine the Constraints When Consuming APIs Such as Rate Limited, Timeouts, and Payload 350-201 Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A security operations team is developing a script that queries a malware analysis API. The API has a rate limit of 10 requests per minute. The script needs to submit 50 files for analysis. The team notices that after the 10th request, the API returns 429 with a Retry-After header of 30 seconds. The script currently retries immediately on 429, which causes more 429 responses. What should the team implement to ensure all 50 files are analyzed without overwhelming the API?

   • AImplement exponential backoff with a maximum wait time and respect the Retry-After header.
   • BChange the API endpoint to a different one that does not have rate limits.
   • CIncrease the number of concurrent requests to 50 to get the analysis done faster.
   • DRemove the retry logic and let the script fail on the first 429.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A developer is writing code to call a REST API. They want to handle the case where the API does not respond within 10 seconds. What is the appropriate way to handle a timeout exception in the client code?

   • AConvert the timeout exception to a 404 error
   • BIgnore the exception and continue with the next line of code
   • CIncrease the timeout value to 60 seconds and retry immediately
   • DCatch the timeout exception and log the error, then optionally retry if appropriate
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   Before sending a request to an API, a developer wants to ensure the payload conforms to the API's expected structure. What is the purpose of validating the request payload against an API schema?

   • ATo authenticate the client to the API
   • BTo compress the payload to reduce bandwidth usage
   • CTo catch errors early and avoid sending malformed requests that the API will reject
   • DTo encrypt the payload so that only the API can read it
   Reveal Solution Discussion Select an answer first