ExamGecko
Home / MuleSoft / MCPA - Level 1 / Practice Test 1
Ask Question

MuleSoft MCPA - Level 1 Practice Test 1

00:00:00
Show Answer
Report Issue   Restart test

Question 1 / 40

What API policy would LEAST likely be applied to a Process API?

Custom circuit breaker
Custom circuit breaker
Client ID enforcement
Client ID enforcement
Rate limiting
Rate limiting
JSON threat protection
JSON threat protection
Comment (0)
Suggested answer: A, C
Explanation:

Answer: JSON threat protection

*****************************************

Fact: Technically, there are no restrictions on what policy can be applied in what layer. Any policy can be applied on any layer API. However, context should also be considered properly before blindly applying the policies on APIs.

That is why, this question asked for a policy that would LEAST likely be applied to a Process API.

From the given options:

>> All policies except "JSON threat protection" can be applied without hesitation to the APIs in Process tier.

>> JSON threat protection policy ideally fits for experience APIs to prevent suspicious JSON payload coming from external API clients. This covers more of a security aspect by trying to avoid possibly malicious and harmful JSON payloads from external clients calling experience APIs.

As external API clients are NEVER allowed to call Process APIs directly and also these kind of malicious and harmful JSON payloads are always stopped at experience API layer only using this policy, it is LEAST LIKELY that this same policy is again applied on Process Layer API.

Reference: https://docs.mulesoft.com/api-manager/2.x/policy-mule3-provided-policies

asked 18/09/2024
Casey Donovan
43 questions