Google Professional Cloud Developer Question 52
Select 3Google Cloud PlatformYou are designing an API for your organization's e-commerce application using Apigee. To ensure secure access and compliance with your organization's data policies, you need to implement Service Control capabilities, such as rate limiting, user authentication, and logging API usage. Which combination of features in Apigee would best help you achieve these requirements?
- A
Use Apigee's Quotas to enforce rate limiting for API requests.
- B
Integrate Apigee with Google Cloud's Identity Platform for user authentication.
- C
Configure Apigee's API Proxies to log API usage and forward the logs to Cloud Logging.
- D
Enable Apigee's Trace tool to monitor real-time API traffic and responses.
- E
Set up Apigee's Caching policies to reduce redundant requests.
Show answer and explanation
Correct answers: A, B, C
Explanation
To incorporate Service Control capabilities in your API using Apigee, you need to focus on rate limiting, authentication, and logging, as they are key to ensuring secure and compliant API usage. Quotas, integration with Identity Platform, and logging via API Proxies address these requirements effectively. While tools like Trace and Caching offer additional benefits, they do not directly address the outlined Service Control capabilities.
- A. Correct.
Apigee's Quotas are specifically designed to enforce rate limits on API requests, ensuring compliance with usage policies.
- B. Correct.
Integrating Apigee with Google Cloud's Identity Platform allows you to authenticate users securely, meeting your security requirements.
- C. Correct.
Using Apigee's API Proxies for logging and forwarding logs to Cloud Logging enables tracking and monitoring API usage, which is critical for compliance and audits.
- D. Incorrect.
While Apigee's Trace tool provides real-time monitoring of API traffic, it does not directly contribute to rate limiting, authentication, or logging capabilities.
- E. Incorrect.
Apigee's Caching policies help optimize performance by reducing redundant requests, but they do not directly address rate limiting, authentication, or logging.