Question

A SOC engineer writes a script that submits a list of 5,000 suspicious file hashes to a threat intelligence REST API in a single POST request. The API repeatedly returns HTTP 413 responses, and the script fails. The API documentation states that each request body may not exceed 100 hashes. What is the MOST appropriate modification to the script to resolve this issue?

Accepted Answer

Split the hash list into batches of 100 or fewer and submit each batch as a separate request

Answer

Add an Authorization header with a valid API key to each request

Answer

Implement an exponential backoff loop that retries the request after a delay

Answer

Change the request method from POST to GET and pass the hashes as query parameters