Question

A SOC engineer writes a Python script that submits a suspicious file hash to a threat intelligence platform's REST API using a POST request to create a new watchlist entry. The API returns a status code of 201 along with a Location header. What does this response indicate the engineer should do next?

Accepted Answer

Recognize the watchlist entry was successfully created and use the Location header to reference the new resource

Answer

Treat the request as failed and retry, because 201 indicates the payload was malformed

Answer

Wait and resend the request after the interval in the Retry-After header, because 201 signals rate limiting

Answer

Re-authenticate with a fresh API token, because 201 means the credentials were rejected