What does the 'X-Request-ID' header do and how does it aid in security incident investigation?

• A.X-Request-ID is a security header that authenticates the request using a cryptographic request ID
• B.X-Request-ID is standardized by RFC and required for all REST APIs in production
• C.X-Request-ID prevents duplicate request processing by rejecting requests with seen IDs
• D.X-Request-ID is a request correlation identifier - either client-generated and passed through, or gateway-generated and injected. All logs across services include the same ID for a given request chain, allowing investigators to trace a specific request through multiple microservices, correlate errors with specific users' requests, and reconstruct the full attack flow across distributed systems during incident response