ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 1 - MCPA - Level 1 discussion

Report
Export

What API policy would LEAST likely be applied to a Process API?

A.
Custom circuit breaker
Answers
A.
Custom circuit breaker
B.
Client ID enforcement
Answers
B.
Client ID enforcement
C.
Rate limiting
Answers
C.
Rate limiting
D.
JSON threat protection
Answers
D.
JSON threat protection
Suggested answer: A, C

Explanation:

Answer: JSON threat protection

*****************************************

Fact: Technically, there are no restrictions on what policy can be applied in what layer. Any policy can be applied on any layer API. However, context should also be considered properly before blindly applying the policies on APIs.

That is why, this question asked for a policy that would LEAST likely be applied to a Process API.

From the given options:

>> All policies except "JSON threat protection" can be applied without hesitation to the APIs in Process tier.

>> JSON threat protection policy ideally fits for experience APIs to prevent suspicious JSON payload coming from external API clients. This covers more of a security aspect by trying to avoid possibly malicious and harmful JSON payloads from external clients calling experience APIs.

As external API clients are NEVER allowed to call Process APIs directly and also these kind of malicious and harmful JSON payloads are always stopped at experience API layer only using this policy, it is LEAST LIKELY that this same policy is again applied on Process Layer API.

Reference: https://docs.mulesoft.com/api-manager/2.x/policy-mule3-provided-policies

asked 18/09/2024
Casey Donovan
40 questions
NextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first