4.7 Explain the Common HTTP Response Codes Associated with REST APIs 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security analyst is testing a REST API endpoint that retrieves threat intelligence feeds. The analyst sends a GET request without any authentication token and receives a 403 Forbidden response. The analyst then adds a valid token and retries, but still receives 403 Forbidden. What is the most likely reason for the second response?

   • AThe authentication token has expired and must be refreshed before the request can succeed.
   • BThe API endpoint is temporarily overloaded and cannot process the request.
   • CThe authenticated user lacks the required role or permission to access the threat intelligence feed.
   • DThe requested threat intelligence feed does not exist on the server.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A REST API client sends a request to retrieve a resource that does not exist. Which HTTP status code should the server return?

   • A404 Not Found
   • B400 Bad Request
   • C401 Unauthorized
   • D403 Forbidden
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A REST API client sends a POST request to create a new user, and the server successfully creates the user. Which HTTP status code is most appropriate for the response?

   • A201 Created
   • B200 OK
   • C204 No Content
   • D202 Accepted
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A developer is building a REST API client that creates new user accounts. The client sends a POST request to /api/users with a valid JSON body. The API responds with 201 Created and a Location header of /api/users/42. What should the client do next?

   • AUse the Location header to retrieve the newly created user resource.
   • BSend a DELETE request to /api/users/42 to clean up the test user.
   • CIgnore the Location header and assume the user was created without further action.
   • DSend the same POST request again to confirm the user was created.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A security analyst is testing a REST API that retrieves firewall logs. The analyst sends a GET request to /api/firewall/logs with a valid authentication token. The API responds with 404 Not Found. What is the most likely cause?

   • AThe API server is temporarily unavailable.
   • BThe requested resource does not exist at the specified URL.
   • CThe analyst does not have permission to view the logs.
   • DThe analyst's authentication token has expired.
   Reveal Solution Discussion Select an answer first