Google Professional Cloud Developer Question 51
Select 4Google Cloud PlatformYou are developing a RESTful API that will handle sensitive financial data. To ensure secure access management, you decide to integrate Service Control capabilities offered by Apigee to enforce policies and logging. Which actions can you take to implement Service Control effectively?
- A
Implement Apigee API proxies to log and monitor API requests and responses.
- B
Use Apigee’s quota policies to limit API usage for specific users or clients.
- C
Enable Apigee’s caching policies to store sensitive financial data locally for faster access.
- D
Integrate Apigee with Cloud Identity and Access Management (IAM) to control API access.
- E
Configure Apigee to enforce TLS encryption for API traffic between clients and the backend.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Service Control capabilities in Apigee are designed to enhance the security, monitoring, and management of APIs. By using API proxies, quota policies, IAM integration, and TLS encryption, developers can ensure secure and controlled access to sensitive API services. However, practices like caching sensitive financial data locally are discouraged, as they can introduce security vulnerabilities.
- A. Correct.
Correct: Apigee API proxies can log and monitor API traffic, which is a key Service Control capability to ensure compliance and security.
- B. Correct.
Correct: Apigee’s quota policies help enforce rate limiting and prevent abuse, which is a vital part of managing API access effectively.
- C. Incorrect.
Incorrect: Caching sensitive financial data locally is not recommended due to potential security risks, and it does not align with Service Control practices.
- D. Correct.
Correct: Integrating Apigee with Cloud IAM allows fine-grained access control for API services, ensuring only authorized users can access sensitive resources.
- E. Correct.
Correct: Enforcing TLS encryption ensures data integrity and confidentiality during API communication, a critical aspect of secure API management.