Exam 350-901 topic 1 question 224 discussion

I think the answer is C. In the official Study Guide p. 18: - Proactively prevent resource overload with rate-limiting mechanisms, which put a cap on how often someone can repeat an action within a certain timeframe. This can be applied to many processes: ... Network traffic: Protect servers and network devices from overload during a distributed denial-of-service (DDoS) attack.

The answer really depended on what type of person you are. As a network guy, mostly will select A or B. As a security guy, the selection should be D. But developer will choose C base on their thinking.

Correct answer: C

C is correct - Rate-limiting > Proactively prevent resource overload with rate-limiting mechanisms, which put a cap on how often someone can repeat an action within a certain timeframe. This can be applied to many processes: - REST API calls: Return an HTTP 429 “Too Many Requests” code to prevent API overuse and let the requestor know the system is busy at the moment. - Network traffic: Protect servers and network devices from overload during a distributed denial-of-service (DDoS) attack. - User interactions: Stop brute-force attacks (for example, do not allow more than three login attempts within 10 minutes). - Data protection: Do not allow frequent calls to extract data (aka web scraping).

Both C and D could work well. As long as the rate-limiting is set-up properly, genuine requests wouldn't be impacted.

I think it's C. Although a FW does help protect against a DDoS attack, this is a DevNet exam not a security exam so I think rate-limiting is more appropriate.

D is correct.