Google Professional Cloud Network Engineer Question 488
Select 2Google Cloud PlatformYour organization has deployed a web application on Google Kubernetes Engine (GKE) behind an HTTP(S) Load Balancer. The application is experiencing traffic spikes, causing backend services to overload. To protect the backend services and ensure fair usage, you want to configure rate limiting using Google Cloud services. Which of the following steps should you take to implement rate limiting effectively?
- A
Configure Cloud Armor security policies with rate-based rules and attach them to the HTTP(S) Load Balancer.
- B
Deploy a custom rate-limiting solution in the Kubernetes cluster using a sidecar proxy.
- C
Use the HTTP(S) Load Balancer’s built-in rate limiting feature to directly enforce traffic limits.
- D
Create a Cloud CDN policy and enable caching to reduce the load on backend services.
- E
Implement a rate-limiting policy using API Gateway if the application exposes APIs.
Show answer and explanation
Correct answers: A, E
Explanation
To configure rate limiting for your application on Google Cloud, you can use Cloud Armor with the HTTP(S) Load Balancer to enforce rate-based rules or API Gateway for APIs. These managed services provide scalable and reliable mechanisms for traffic control. While caching with Cloud CDN or custom solutions in Kubernetes can be helpful in other contexts, they do not directly address rate limiting in this scenario.
- A. Correct.
Correct: Cloud Armor allows you to configure rate-based rules to limit traffic based on specific criteria, such as IP addresses or request patterns. Attaching these rules to your HTTP(S) Load Balancer helps protect backend services from overload.
- B. Incorrect.
Incorrect: While deploying a custom solution in Kubernetes is possible, it is not the preferred or recommended approach when Google Cloud offers managed services like Cloud Armor or API Gateway for rate limiting.
- C. Incorrect.
Incorrect: The HTTP(S) Load Balancer does not natively support rate limiting. Rate limiting must be implemented using complementary services like Cloud Armor.
- D. Incorrect.
Incorrect: Cloud CDN can reduce backend load by caching responses, but it does not enforce rate limiting or control request rates.
- E. Correct.
Correct: API Gateway supports rate limiting for APIs, which is a suitable solution if the application exposes APIs and requires fine-grained traffic control.