A development team created a mobile application that contacts a company's back$-$end APIs housed in a PaaS environment. The APIs have been experiencing high processor utilization due to scraping activities. The security engineer needs to recommend a solution that will prevent and remedy the behavior.

Which of the following would BEST safeguard the APIs? $($Choose two.$)$

A$.$ Bot protection

B$.$ OAuth $2\mathrm{.}0$

C$.$ Input validation

D$.$ Autoscaling endpoints

E$.$ Rate limiting

F$.$ CSRF protection