Courseiva
← GCDL
Full test
Google Cloud products, services, and solutions →hardMultiple ChoiceObjective-mapped

Cloud Digital Leader Practice Question: Google Cloud products, services, and solutions

A company wants to expose its internal backend services to external partners through a managed API layer that handles authentication, rate limiting, traffic management, and analytics — without modifying the underlying services. Which Google Cloud product is designed for this API management use case?

⚠ Common exam trap

Many candidates confuse Cloud Endpoints (a lightweight option for Google Cloud-native backends) with Apigee (the enterprise platform for exposing any backend to external partners), missing the requirement for a developer portal and no backend modifications.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Apigee, Google Cloud's full-featured enterprise API management platform for authentication, rate limiting, analytics, and developer portal without modifying backend services

Apigee is Google Cloud's full-featured enterprise API management platform designed to expose backend services to external partners without requiring modifications to those services. It provides built-in authentication, rate limiting, traffic management, and analytics, along with a developer portal for partner onboarding. This makes it the correct choice for the described use case.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Cloud Load Balancing, which distributes API requests across backend instances

    Why it's wrong here

    Cloud Load Balancing distributes incoming requests across backend instances (e.g., Compute Engine, GKE, serverless) to improve availability, scalability, and resilience, with features like health checks, auto-scaling, and SSL termination. It operates at the L4/L7 infrastructure layer and is traffic-agnostic: it does not understand API semantics, cannot authenticate API callers, enforce quotas or rate limits, generate API analytics, or provide a developer portal. While a load balancer may route API calls to an Apigee gateway, it is purely a traffic distribution mechanism and lacks the policy execution and lifecycle management capabilities that define an enterprise API management platform.

  • ✗

    Cloud Endpoints, a lighter-weight API gateway for Google Cloud-hosted APIs

    Why it's wrong here

    Cloud Endpoints provides API authentication and some management capabilities but is lighter than Apigee and lacks the full enterprise feature set (developer portal, advanced analytics, monetization, traffic policies). For enterprise partner API management, Apigee is the correct answer.

  • ✓

    Apigee, Google Cloud's full-featured enterprise API management platform for authentication, rate limiting, analytics, and developer portal without modifying backend services

    Why this is correct

    Apigee is the complete API management solution. Its proxy architecture sits in front of any backend service and adds authentication (OAuth, API keys), rate limiting, quota enforcement, traffic transformation, analytics, and a developer portal — with zero changes required to the backend services.

  • ✗

    Cloud Armor, Google Cloud's web application firewall and DDoS protection service

    Why it's wrong here

    Cloud Armor is a web application firewall (WAF) and DDoS protection service that operates at Google's edge, filtering traffic based on IP ranges, geo-location, and configurable rules (e.g., OWASP signatures, preconfigured WAF rules). It does not act as an API management platform: it cannot authenticate individual API consumers (OAuth, API keys), enforce per-consumer rate limits or quotas, expose a developer portal, or provide API-specific analytics. Cloud Armor can be layered in front of Apigee or backends, but it only filters HTTP/S traffic at the network/application edge—it never inspects or manages the API contract, so it is not a substitute for Apigee.

About these practice questions

One of 829 original GCDL practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.