Professional Cloud Developer Exam QuestionsBrowse all questions from this exam
Go to Exam

Professional Cloud Developer Exam - Question 334

You are designing a microservices application on GKE that will expose a public API to users. Users will interact with the application by using OAuth 2.0, and illegitimate requests should receive a 403 response code. You need the API to be resilient against distributed denial of service (DDoS) attacks and critical security risks such as SQL injection (SQL) and cross-site scripting (XSS).

You want to design the application's architecture while following Google-recommended practices. What should you do?

Show Answer
Correct Answer:

Discussion

1 comment
Sign in to comment
LaureatulOption: C
May 3, 2025

Option C is the most efficient and secure approach, following Google-recommended best practices for handling DDoS attacks, SQL injection, XSS, and securing APIs in a scalable manner. Using Cloud Armor with reCAPTCHA Enterprise ensures that only legitimate traffic is allowed to interact with your public API, while also providing high availability and robustness.