Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ61

Integrating applications with Google Cloud services

You are building a new ecommerce application that uses Cloud Functions. You want to expose your application’s APIs to public users while maintaining a high level of security. You must ensure that only authorized users can access the APIs and that all API traffic is encrypted and safeguarded against unauthorized access. You want the most scalable and secure approach. What should you do?

  • A Deploy your Cloud Functions behind Cloud Load Balancing, and use Cloud Armor to protect your APIs from distributed denial of service (DDoS) attacks.
  • B Deploy your Cloud Functions with Security Command Center enabled, and use IAM to manage access to your APIs.
  • C Deploy your Cloud Functions behind an Apigee proxy and use Apigee’s authentication and authorization features to secure your APIs.
  • D Deploy your Cloud Functions behind a Cloud API Gateway proxy. Create and use an API key to authorize users to access your APIs.
Explanation

Apigee provides a scalable API proxy layer for securing and managing APIs, including granular security controls and authentication and authorization policies. Its OAuth 2.0 capabilities can generate and validate access tokens for protected APIs. API keys alone are not recommended as the only protection for sensitive API calls because they are included in requests and are less secure than other credentials.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!