Safe methods vs unsafe methods in Rest API - Interactive Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to use the HTTP method that is considered safe and only retrieves data.

Rest API

response = requests.[1]('https://api.example.com/data')

Drag options to blanks, or click blank then click option'

AGET

BDELETE

CPOST

DPUT

Attempts:

3 left

💡 Hint

Common Mistakes

Using POST or PUT when only reading data is needed.

The GET method is safe because it only retrieves data without changing anything on the server.

2fill in blank

medium

Complete the code to use the HTTP method that is unsafe and used to create new data on the server.

Rest API

response = requests.[1]('https://api.example.com/data', json=payload)

Drag options to blanks, or click blank then click option'

AGET

BOPTIONS

CHEAD

DPOST

Attempts:

3 left

💡 Hint

Common Mistakes

Using GET when data needs to be created or changed.

POST is an unsafe method because it creates or changes data on the server.

3fill in blank

hard

Fix the error in the code by choosing the correct HTTP method that is safe and used to check headers only.

Rest API

response = requests.[1]('https://api.example.com/data')

Drag options to blanks, or click blank then click option'

APUT

BHEAD

CPOST

DDELETE

Attempts:

3 left

💡 Hint

Common Mistakes

Using GET when only headers are needed.

HEAD is a safe method that requests headers only, without the body, and does not change server data.

4fill in blank

hard

Fill both blanks to complete the code that uses a safe method and checks if the response status is 200.

Rest API

response = requests.[1]('https://api.example.com/data')
if response.status_code [2] 200:
    print('Success')

Drag options to blanks, or click blank then click option'

AGET

B==

C!=

DPOST

Attempts:

3 left

💡 Hint

Common Mistakes

Using POST instead of GET for safe retrieval.

Using != instead of == for status check.

GET is a safe method to retrieve data, and checking if status_code == 200 confirms success.

5fill in blank

hard

Fill all three blanks to complete the code that sends data with an unsafe method, checks if the response status is 201, and prints a message.

Rest API

response = requests.[1]('https://api.example.com/data', json=payload)
if response.status_code [2] 201:
    print('[3]')

Drag options to blanks, or click blank then click option'

AGET

B==

CCreated

DPOST

Attempts:

3 left

💡 Hint

Common Mistakes

Using GET instead of POST for creating data.

Checking for status 200 instead of 201.

POST is unsafe because it creates data. Status 201 means 'Created', so printing that message confirms success.

Practice

1. Which HTTP method is considered safe because it only retrieves data without changing anything?

easy

A. DELETE

B. POST

C. PUT

D. GET

Solution

1. Step 1: Understand safe methods

   Safe methods do not change data on the server; they only read or retrieve data.

2. Step 2: Identify the safe method among options

   GET is the method used to request data without modifying it, making it safe.

3. Final Answer:

   GET -> Option D

4. Quick Check:

   Safe method = GET [OK]

Hint: Safe methods only read data, GET is the common safe method [OK]

Common Mistakes:

• Confusing POST as safe
• Thinking PUT is safe
• Assuming DELETE is safe

2. Which of the following is the correct syntax to send data to a server to create a new resource?

easy

A. POST /resource HTTP/1.1

B. GET /resource HTTP/1.1

C. DELETE /resource HTTP/1.1

D. PUT /resource HTTP/1.1

Solution

1. Step 1: Identify method for creating resources

   POST is used to send data to the server to create new resources.

2. Step 2: Check syntax correctness

   POST /resource HTTP/1.1 is the correct syntax to send data for creation.

3. Final Answer:

   POST /resource HTTP/1.1 -> Option A

4. Quick Check:

   Creating resource = POST [OK]

Hint: POST is for sending data to create, syntax includes POST and resource path [OK]

Common Mistakes:

• Using GET to send data
• Confusing DELETE with POST
• Using PUT for creation without context

3. What will be the result of this HTTP request method usage?

PUT /items/123 HTTP/1.1
Content-Type: application/json

{"name": "New Item"}

Choose the correct description.

medium

A. It retrieves the item with ID 123 without changes.

B. It updates or replaces the item with ID 123 with new data.

C. It deletes the item with ID 123 from the server.

D. It creates a new item without specifying an ID.

Solution

1. Step 1: Understand the PUT method purpose

   PUT is used to update or replace an existing resource at a specific URL.

2. Step 2: Analyze the request details

   The request targets /items/123 with JSON data, meaning it updates item 123.

3. Final Answer:

   It updates or replaces the item with ID 123 with new data. -> Option B

4. Quick Check:

   PUT updates resource = C [OK]

Hint: PUT replaces or updates resource at given URL [OK]

Common Mistakes:

• Thinking PUT retrieves data
• Confusing PUT with DELETE
• Assuming PUT creates without ID

4. Identify the error in this HTTP request if the goal is to safely retrieve data:

POST /users HTTP/1.1
Host: example.com

medium

A. The HTTP version is incorrect; it should be HTTP/2.0.

B. The Host header is missing, causing a syntax error.

C. POST is unsafe and changes data; GET should be used to retrieve data.

D. POST cannot be used with /users endpoint.

Solution

1. Step 1: Understand the goal and method used

   The goal is to safely retrieve data, but POST is used which changes data.

2. Step 2: Identify correct method for safe retrieval

   GET is the safe method to retrieve data without side effects.

3. Final Answer:

   POST is unsafe and changes data; GET should be used to retrieve data. -> Option C

4. Quick Check:

   Safe retrieval = GET, not POST [OK]

Hint: Use GET to retrieve data safely, not POST [OK]

Common Mistakes:

• Ignoring method safety
• Thinking Host header is missing
• Confusing HTTP versions

5. You want to design an API endpoint that allows clients to delete a user account safely. Which HTTP method should you use, and why?

hard

A. DELETE, because it explicitly removes the resource on the server.

B. POST, because it can send data and create resources.

C. GET, because it is safe and does not change data.

D. PUT, because it updates existing resources.

Solution

1. Step 1: Identify the action needed

   The goal is to remove (delete) a user account from the server.

2. Step 2: Choose the correct HTTP method for deletion

   DELETE is the method designed to remove resources safely and clearly.

3. Final Answer:

   DELETE, because it explicitly removes the resource on the server. -> Option A

4. Quick Check:

   Deleting resource = DELETE method [OK]

Hint: Use DELETE to remove resources explicitly and safely [OK]

Common Mistakes:

• Using GET for deletion
• Confusing POST with DELETE
• Using PUT instead of DELETE