Question

A SOC analyst writes a Python script to enrich IP indicators by querying a threat-intelligence REST API in a loop. After processing about 100 indicators quickly, the script begins receiving HTTP 429 responses and enrichment stops. Inspecting the response, the analyst notices a 'Retry-After: 30' header. What is the correct interpretation and remediation?

Accepted Answer

The API is rate limiting the client; the script should pause for the number of seconds specified in the Retry-After header before resending requests

Answer

The API authentication token has expired; the script should request a new token and retry immediately

Answer

The request payload is malformed; the script should validate the JSON body and resend the corrected request

Answer

The API server is experiencing an internal error; the script should escalate to the vendor and stop all queries