Which of the following would BEST reduce the risk of application programming interface (API) unavailability?

Limiting the rate of incoming requests, known as rate limiting, helps prevent API overloading by controlling the number of requests a client can make within a specific timeframe. This measure protects the API from being overwhelmed, ensuring better availability and performance. While dedicated servers, continuous integration/deployment, and stress testing contribute to overall system robustness, rate limiting directly addresses the risk of unavailability due to excessive or malicious traffic.

References:

ISACA CISA Review Manual, 28th Edition, Chapter 4: Information Systems Operations and Business Resilience.