CompTIA SecurityX (CAS-005) — Question 191

A company notices that cloud environment costs increased after using a new serverless solution based on API requests. Many invalid requests from unknown IPs were found, often within a short time. Which of the following solutions would most likely solve this issue, reduce cost, and improve security?

Answer options

• A. Using digital certificates for known customers and performing API authorization through those certificates
• B. Defining request rate limits and comparing new requests from unknown IPs with a list of known-malicious IPs
• C. Setting authentication processes for the API requests as well as proper rate limits according to regular usage
• D. Only allowing API requests coming from regions with known customers

Correct answer: C

Explanation

The correct answer is C because setting authentication processes and rate limits ensures that only legitimate requests are processed, reducing the likelihood of invalid requests and associated costs. Options A and D may help with security but do not directly address cost reduction or the issue of invalid requests effectively. Option B could improve security but lacks the direct approach to managing costs through authentication and rate limiting.