Optional Practice Lab 1 of 2 · 25 min

Design the Rate-Limit Contract

Practice choosing a budget owner, mapping denials to HTTP, calculating safe retry values, and recognizing where local state stops being enough.

Covers Lesson 1 · Lesson 2

What you will practice

Choose an identity and operation scope for a concrete API policy.
Distinguish a caller-specific denial from a service-wide failure.
Calculate a safe Retry-After value at the HTTP boundary.
Trace how the shared contracts carry a decision through the system.

Step 1 of 5

Pass with 80% · unlimited retries

0% correct

Choose the budget owner

A company sells report-generation access to organizations. One organization may have 200 employees, but the subscription promises 100 generated reports per hour for the whole organization. Which key best matches that product promise?

The caller's IP addressThe individual employee IDThe organization ID plus the report-generation operationThe report route, shared by every organization