クライアントは、認証を必要としない一連の負荷分散された API にアクセスしようとすると、速度が遅いと報告しています。API をホストするサーバーの CPU 使用率が高くなっています。API の前にある WAF にはアラートが見つかりません。 パフォーマンスの問題をタイムリーに最善の方法で解決するために、セキュリティ エンジニアが推奨する必要があるのは次のうちどれですか?
正解:A
Rate limiting is a technique that can limit the number or frequency of requests that a client can make to an API (application programming interface) within a given time frame. This can help remedy the performance issues caused by high CPU utilization on the servers that host the APIs, as it can prevent excessive or abusive requests that could overload the servers. Implementing geoblocking on the WAF (web application firewall) may not help remedy the performance issues, as it could block legitimate requests based on geographic location, not on request rate. Implementing OAuth 2.0 on the API may not help remedy the performance issues, as OAuth 2.0 is a protocol for authorizing access to APIs, not for limiting requests. Implementing input validation on the API may not help remedy the performance issues, as input validation is a technique for preventing invalid or malicious input from reaching the API, not for limiting requests. Verified Reference: https://www.comptia.org/blog/what-is-rate-limiting https://partners.comptia.org/docs/default-source/resources/casp-content-guide