Google Professional Cloud Developer Question 54
Select 3Google Cloud PlatformYour team is developing a new API that will be exposed to external partners via Apigee. To ensure secure access and prevent unauthorized usage, you decide to leverage Service Control capabilities. Which steps should you take to implement this functionality effectively?
- A
Configure an API proxy in Apigee and enable authorization policies to validate user credentials.
- B
Use Google Cloud's Service Control API to manage quotas, rate limiting, and logging for your API.
- C
Integrate your API with Cloud Endpoints and rely on its native security features instead of Apigee.
- D
Enable and configure Apigee's API Key or OAuth 2.0 policies for authentication and authorization.
- E
Deploy a Cloud Function to act as a middleware layer for manually validating API access requests.
Show answer and explanation
Correct answers: A, B, D
Explanation
To incorporate Service Control capabilities using Apigee, you need to configure an API proxy and enforce robust authentication and authorization mechanisms, such as API Key or OAuth 2.0 policies. Additionally, Google Cloud's Service Control API can be utilized for managing quotas, rate limits, and logging, which are crucial for monitoring and controlling API usage. Using Cloud Endpoints or manual middleware is not appropriate when Apigee is the designated API gateway.
- A. Correct.
Correct: Configuring an API proxy in Apigee and enabling authorization policies is a critical step to secure API access and ensure proper validation of user credentials.
- B. Correct.
Correct: Leveraging Google Cloud's Service Control API allows you to enforce quotas, rate limits, and logging, which are essential for API management and monitoring.
- C. Incorrect.
Incorrect: While Cloud Endpoints offers security features, this is not the correct approach when using Apigee. Apigee is the chosen API gateway in this scenario, so integration with Cloud Endpoints is not relevant.
- D. Correct.
Correct: Using Apigee's API Key or OAuth 2.0 policies ensures proper authentication and authorization, which are fundamental to Service Control capabilities.
- E. Incorrect.
Incorrect: Deploying a Cloud Function as middleware for manual validation is unnecessary and inefficient when Apigee provides built-in features for managing API access and security.