Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted traffic and make the host eventually close access to the website?

Or do hosts have a mechanism to defend against this?