Question

A SOC engineer writes a Python script that pulls indicators from a threat intelligence REST API using an API key passed in the request header. The script worked yesterday, but today every request returns HTTP 401 with a body message of {"error":"invalid or expired credentials"}. The endpoint URL and payload are unchanged. What is the MOST likely cause the engineer should investigate first?

Accepted Answer

The API key used for authentication is no longer valid and must be regenerated or renewed

Answer

The account is authenticated but lacks permission to access the requested indicator resource

Answer

The script is exceeding the API's request rate limit and should honor the Retry-After header

Answer

The requested indicator resource does not exist at the specified endpoint path