Google Professional Cloud Developer Question 358
Select 3Google Cloud PlatformYou are tasked with exposing an existing backend service through a secure API using Apigee. The API should implement rate limiting, authentication via API keys, and logging for monitoring purposes. Which of the following steps should you take to properly configure and secure the API in Apigee?
- A
Create an API proxy in Apigee and configure a Spike Arrest policy to enforce rate limiting.
- B
Enable the Apigee integrated Cloud Identity and Access Management (IAM) to handle API key authentication.
- C
Add a VerifyAPIKey policy to the API proxy to enforce authentication.
- D
Configure a Quota policy in the API proxy to limit the number of requests per user.
- E
Enable Apigee's built-in logging to capture API request and response details.
Show answer and explanation
Correct answers: A, C, E
Explanation
To expose and secure an API in Apigee, you need to configure an API proxy and add policies for the required features. In this scenario, rate limiting is achieved using a Spike Arrest policy, and authentication is enforced using a VerifyAPIKey policy. Logging must also be enabled to monitor API activity. Quota policies, while useful, are not explicitly required for this scenario as rate limiting is already addressed.
- A. Correct.
Correct. A Spike Arrest policy in Apigee is used to enforce rate limiting to prevent abuse and manage traffic spikes.
- B. Incorrect.
Incorrect. While Apigee integrates with IAM for specific use cases, authentication via API keys requires a VerifyAPIKey policy within the API proxy, not IAM.
- C. Correct.
Correct. The VerifyAPIKey policy is used to enforce authentication in Apigee by validating API keys.
- D. Incorrect.
Incorrect. While a Quota policy is used to enforce limits on request counts, the scenario specifically mentions rate limiting, which is handled by the Spike Arrest policy.
- E. Correct.
Correct. Enabling Apigee's logging capabilities ensures that API request and response details are captured for monitoring and troubleshooting.