Google Professional Cloud Network Engineer Question 487
Single answerGoogle Cloud PlatformYou are managing a public API hosted on Google Cloud and want to protect it from misuse by applying a rate-limiting policy. The goal is to ensure that a single client cannot exceed 100 requests per minute while allowing other clients to access the API without interruptions. Which Google Cloud solution should you configure to achieve this?
- A
Use Google Cloud Armor to create a rate-limiting policy with IP-based throttling.
- B
Configure a rate-limiting policy using the Apigee API Management platform.
- C
Set up firewall rules in the VPC to limit incoming requests per client.
- D
Enable rate limiting directly in Cloud Load Balancing.
Show answer and explanation
Correct answer: B
Explanation
Apigee API Management is the most appropriate solution for rate limiting in this scenario. It enables you to define policies that can enforce client-specific limits, such as restricting requests to 100 per minute per client. While other options like Google Cloud Armor and firewall rules may provide partial traffic control, they are not designed for API-level rate limiting with the required granularity.
- A. Incorrect.
Google Cloud Armor is primarily designed for DDoS protection and security policies. While it can enforce rate limits for general traffic, it is not the best choice for API-level rate limiting based on clients.
- B. Correct.
Apigee API Management provides robust rate-limiting capabilities specifically designed for APIs. It allows you to define policies that control traffic at the client level, such as limiting requests per minute per client.
- C. Incorrect.
Firewall rules in a VPC are not designed to enforce rate-limiting policies. They control traffic at the IP level but lack the granularity to apply per-client limits effectively.
- D. Incorrect.
Cloud Load Balancing does not natively support rate-limiting capabilities. It is used for distributing traffic but does not provide fine-grained API management features like rate limiting.