Google Professional Cloud Developer Question 355
Select 4Google Cloud PlatformYou are developing an API that will be exposed to external clients to retrieve sensitive customer data. To ensure security, you decide to use Apigee as your API management platform. Which combination of actions should you take to secure the API while exposing it through Apigee?
- A
Enable OAuth 2.0 authentication for the API in Apigee.
- B
Apply IP whitelisting for trusted client networks in Apigee.
- C
Use Apigee's Rate Limiting policies to mitigate abuse by limiting API requests.
- D
Expose the API directly from the backend service without routing it through Apigee.
- E
Encrypt sensitive data in API responses using Apigee's Message Transformation policies.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To secure an API exposed through Apigee, a combination of authentication, network restrictions, abuse prevention, and data protection is essential. OAuth 2.0 ensures only authorized users can access the API, IP whitelisting limits access to trusted sources, and rate limiting prevents abuse. Additionally, encrypting sensitive data in responses ensures the confidentiality of customer information. Directly exposing the backend API bypasses these security features and is not recommended.
- A. Correct.
Correct: Enabling OAuth 2.0 authentication ensures that only authorized clients can access the API, which is a fundamental security measure.
- B. Correct.
Correct: Applying IP whitelisting allows you to restrict API access to trusted networks, adding another layer of security.
- C. Correct.
Correct: Rate Limiting policies in Apigee help prevent abuse and protect the API from excessive or malicious requests.
- D. Incorrect.
Incorrect: Exposing the API directly from the backend bypasses Apigee's security features, leaving your API vulnerable to attacks.
- E. Correct.
Correct: Encrypting sensitive data in API responses using Apigee policies ensures that sensitive information remains secure during transmission.