Intrigued by the art of cloud architecture? Discover how to design, develop, and manage robust, secure, scalable, and dynamic solutions on Google Cloud as you prepare for the Professional Cloud Architect exam!
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
A retail company hosts a set of microservices on Google Kubernetes Engine (GKE) behind an external Application Load Balancer. During flash sale events, public client applications generate massive sudden surges in API requests that overload backend database services. Additionally, security teams require verified identity for third-party developers, web application firewall (WAF) filtering against OWASP Top 10 vulnerabilities, and mitigation against automated bot traffic.
Which multi-layered architecture should you recommend to meet these requirements?
This architecture combines Google Cloud Armor, reCAPTCHA Enterprise, and Apigee into a unified Web App and API Protection (WAAP) solution. Apigee acts as the enterprise API management gateway, while Cloud Armor and reCAPTCHA handle edge security and bot mitigation.
Combining Cloud Armor, reCAPTCHA, and Apigee directly satisfies edge perimeter security, bot mitigation, API credential verification, and traffic smoothing, whereas standalone load balancing or firewall rules cannot provide application-level API governance.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.