Cloud Digital Leader Why cloud technology is transforming business Practice Question
A traditional bank is considering adopting open banking — exposing its financial data and transaction capabilities as APIs to third-party developers (with customer consent). This enables FinTech startups to build new financial products on top of the bank's infrastructure. What cloud capability is most essential to safely and scalably implement open banking?
⚠ Common exam trap
Google Cloud often tests the misconception that open banking is primarily about data storage or latency, when in fact the critical challenge is secure, scalable API management with authentication and rate limiting.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A managed API platform (like Apigee) that provides authentication, rate limiting, developer portal, and usage monitoring for third-party API consumers.
Open banking requires secure, scalable, and controlled exposure of APIs to third-party developers. A managed API platform like Apigee provides essential capabilities such as OAuth 2.0 authentication, rate limiting, developer portal, and usage monitoring, which are critical for ensuring safe and scalable API consumption. Without these controls, the bank cannot enforce security policies, manage access, or monitor usage effectively.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A large data warehouse (BigQuery) to store all transaction data for developer access.
Why it's wrong here
Directly exposing BigQuery to third-party developers omits the API governance plane; consumers would have no enforced authentication, no scopes or consent checks, no quotas, and no per-call audit trail. Data warehouses are optimized for analytical workloads, not fine-grained record-level access, and unrestricted SQL queries would cause cost escalation and potential data leakage. Open banking mandates controlled API contracts, not raw database access.
- ✓
A managed API platform (like Apigee) that provides authentication, rate limiting, developer portal, and usage monitoring for third-party API consumers.
Why this is correct
A managed API platform supplies the full policy layer required for regulated open banking: OAuth2/OIDC authentication, consent-based scopes, per-developer rate limits and quotas, API key management, and a self-service developer portal with documentation and live usage monitoring. It also provides analytics, monetization, and lifecycle governance, enabling the bank to expose APIs safely to third parties while tracking every call.
- ✗
A dedicated cloud region in each country where the bank operates to minimize latency for API consumers.
Why it's wrong here
Deploying infrastructure in every operating country is a latency optimization, not a prerequisite for secure third-party access. A bank can meet open banking requirements from a single well-connected region using a managed API platform, then add regions later based on performance and data residency needs. Geographic presence does not substitute for OAuth-based consent, quotas, or developer portal onboarding.
- ✗
A blockchain infrastructure to create an immutable record of all API transactions.
Why it's wrong here
Blockchain-based transaction ledgers introduce unnecessary complexity and performance overhead while failing to address the primary requirements of open banking: authentication, fine-grained consent, rate limiting, and developer lifecycle management. Regulatory audit trails are already satisfied by standard API gateway access logs and tamper-evident logging, without the storage and privacy liabilities of an immutable ledger.
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
Data
Data is raw, unprocessed information, like numbers, words, or measurements, that can be stored, processed, and analyzed by computers.
Key term
Apigee
Apigee is a Google Cloud platform for designing, securing, and analyzing APIs that connect applications and services.
About these practice questions
This GCDL question is part of Courseiva's 829-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.