フリー問題

問題文

In a Private Space, one app is a public storefront and another is an order API consumed only by the storefront and by software in a peered VPC. What should be decided at creation time, and why?

選択肢

1. Create the API app with internal routing, because that setting can only be chosen at creation and it prevents the app from receiving external web traffic.
2. Place the API app in a second space to isolate it, and peer that space with the storefront's space so that the two can still exchange traffic after the split has been made.
3. Create the API app with DNS service discovery only, and skip internal routing, and discovery already keeps the app off the public router while the storefront resolves it by name.
4. Create both apps normally and enable internal routing on the API app later, once the storefront has been verified against it, because the setting can be toggled at any time from the application's settings page in the dashboard.