API Reconnaissance and Model Fingerprinting COASP Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   What is the primary purpose of API rate limiting?

   • ATo validate API parameters
   • BTo encrypt API responses
   • CTo prevent abuse and ensure fair usage
   • DTo log all API requests
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common technique for fingerprinting a machine learning model behind an API?

   • AAnalyzing response time variations for different inputs
   • BChecking the API's SSL certificate
   • CReading the API's source code from the server
   • DPerforming a port scan on the API server
   Reveal Solution Discussion Select an answer first
3. 38foundation · easy

   Which of the following is a common source for discovering API endpoints during reconnaissance?

   • AAPI documentation (e.g., Swagger/OpenAPI)
   • BDNS zone transfer
   • CWHOIS records
   • DSSL certificate transparency logs
   Reveal Solution Discussion Select an answer first