API Security and Integration Best Practices CSE Practice Questions (Page 12)

Questions 56–57

1. 56application · medium

   A developer is integrating a third-party payment API into a cloud application. The integration must handle transient network failures gracefully. What is the best practice?

   • AUse a synchronous call and block until the API responds
   • BImplement retry logic with exponential backoff and circuit breaker
   • CRetry immediately up to 10 times on failure
   • DLog the error and do not retry
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   An e-commerce API experiences intermittent slowdowns during flash sales. The operations team notices that a small number of clients are sending a disproportionately high number of requests. They want to protect the API without blocking legitimate users. Which policy should they configure?

   • AApply a per-client rate limit and return HTTP 429 with a Retry-After header when exceeded.
   • BSet a global rate limit of 100 requests per second for all clients.
   • CIncrease the API server's capacity to handle any request volume.
   • DBlock any client that sends more than 10 requests in a minute by permanently banning the IP address.
   Reveal Solution Discussion Select an answer first