Question

A SOC engineer writes a Python script that queries a threat-intelligence API to enrich indicators. For a batch of 500 IOCs the request consistently fails after about 30 seconds, even though smaller batches succeed. The API documentation states responses are returned synchronously and connections are dropped if a single request exceeds a fixed server-side processing limit. Which API constraint is the engineer most likely encountering, and what is the best remediation?

Accepted Answer

A timeout constraint; break the batch into smaller chunks so each request completes within the server's processing window

Answer

A rate-limit constraint; add an Authorization header with a valid API key to raise the allowed request quota

Answer

A payload-size constraint; compress the request body with gzip to fit under the maximum accepted size

Answer

An authentication constraint; refresh the bearer token because it expires after 30 seconds