Google Professional Cloud Developer Question 49
Select 4Google Cloud PlatformYou are designing an API gateway using Apigee to manage and secure API traffic for a financial application. The application must ensure that requests to its backend services are authorized and comply with defined quotas and rate limits. How can you incorporate Service Control capabilities in Apigee to achieve these goals?
- A
Use Apigee's Quota policy to enforce rate limits on API traffic.
- B
Enable Apigee's Spike Arrest policy to prevent traffic spikes.
- C
Integrate with Google Cloud Service Control to enforce IAM-based authorization policies.
- D
Use Apigee's Response Cache policy to cache API responses for faster access.
- E
Configure OAuth 2.0 policies in Apigee to validate tokens for API access.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Incorporating Service Control capabilities in Apigee involves managing access and usage of APIs through features like quotas, rate limiting, and authorization. Apigee's Quota and Spike Arrest policies enforce rate limits and traffic management. Integration with Google Cloud Service Control adds IAM-based authorization. Additionally, OAuth 2.0 policies provide token validation to ensure secure access. While caching can optimize performance, it is not directly related to Service Control capabilities.
- A. Correct.
Apigee's Quota policy allows you to define and enforce rate limits on API usage, which is a key Service Control capability.
- B. Correct.
The Spike Arrest policy in Apigee helps to manage and prevent sudden traffic spikes, ensuring stability and control.
- C. Correct.
Integrating with Google Cloud Service Control enables the enforcement of IAM-based policies, ensuring only authorized requests reach the backend.
- D. Incorrect.
Response Cache policies improve performance but do not directly contribute to Service Control capabilities like authorization or rate limiting.
- E. Correct.
Using OAuth 2.0 policies in Apigee helps validate and enforce secure access to APIs, which is a critical aspect of service authorization.