4.3 Explain the Process of Third-Party API Gateway Integration (e.g., AWS, API Gateway, APIM, Apigee) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security architect is evaluating whether to integrate the company's API gateway with the CSPM platform. The primary goal is to gain centralized visibility into API traffic across multiple cloud providers. What is the main benefit of this integration?

   • AIt allows the CSPM platform to aggregate API traffic metadata from AWS, Azure, and Apigee into a single security view.
   • BIt replaces the need for the API gateway's native logging and monitoring features.
   • CIt eliminates the need for separate IAM roles and service accounts in each cloud provider.
   • DIt automatically migrates all API traffic to the CSPM platform's cloud.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which AWS service is typically used to grant the security platform permission to read API Gateway logs and metrics?

   • AAWS Key Management Service (KMS) key
   • BAWS Identity and Access Management (IAM) role
   • CAWS Shield subscription
   • DAWS WAF web ACL
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An administrator has integrated Apigee with the CSPM platform. The integration appears to be configured correctly, but the CSPM platform is not showing any Apigee traffic data. The service account key is valid and the organization name is correct. What is the most likely cause of this issue?

   • AThe service account key was created in the wrong Google Cloud project.
   • BThe Apigee organization has not generated any API traffic since the integration was completed.
   • CThe CSPM platform requires a separate Apigee analytics API key to be configured.
   • DThe Apigee environment group is not associated with the organization.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of integrating a third-party API gateway with a cloud security posture management (CSPM) platform?

   • ATo replace the CSPM's native vulnerability scanning capabilities
   • BTo automatically migrate all on-premises APIs to the cloud
   • CTo provide a backup data store for API gateway logs
   • DTo extend security visibility and policy enforcement to API traffic managed by the gateway
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator has completed the AWS API Gateway integration with the CSPM platform. To validate that the integration is working correctly, what should the administrator check first?

   • AConfirm that API Gateway access logs are appearing in CloudWatch Logs.
   • BCheck that the API Gateway endpoint is publicly accessible from the internet.
   • CEnsure that the API Gateway API key is shared with the CSPM platform.
   • DVerify that the IAM role has the AdministratorAccess policy attached.
   Reveal Solution Discussion Select an answer first