Google Professional Cloud Developer Question 53
Single answerGoogle Cloud PlatformYou are developing an API management solution using Apigee to secure and control your organization’s APIs. Your organization requires that the API traffic is monitored and access is restricted based on the user’s roles and organizational policies. How can you incorporate Service Control capabilities to meet these requirements?
- A
Enable Apigee's API Key validation feature and configure authentication using OAuth 2.0
- B
Integrate Apigee with Google Cloud’s Service Control API to enforce IAM policies and quotas
- C
Use Apigee’s built-in analytics dashboard to monitor traffic and manually block unauthorized users
- D
Configure Apigee to use Cloud Logging for tracking API activity and enforce access rules using custom scripts
Show answer and explanation
Correct answer: B
Explanation
The correct approach to incorporate Service Control capabilities is to integrate Apigee with Google Cloud’s Service Control API. This integration allows you to enforce IAM policies, apply quotas, and monitor API traffic in a scalable and secure way, meeting the organizational requirements for access control and monitoring.
- A. Incorrect.
Apigee's API Key validation feature and OAuth 2.0 provide basic authentication and authorization, but they do not enforce organizational policies, quotas, or advanced monitoring using Service Control capabilities.
- B. Correct.
Integrating Apigee with Google Cloud’s Service Control API enables enforcement of IAM policies, quotas, and organizational restrictions, which aligns with the requirements in the scenario.
- C. Incorrect.
Apigee’s analytics dashboard provides insights into API traffic but does not offer the ability to enforce granular access restrictions or IAM policies. Manual intervention is not scalable or reliable for enforcing policies.
- D. Incorrect.
Using Cloud Logging to track API activity is useful for monitoring, but custom scripts to enforce access rules are not an effective or scalable way to implement Service Control capabilities.