ExamGecko
Search Search Login
Home Home / MuleSoft / MCPA - Level 1
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following best fits the definition of API-led connectivity?
An API implementation returns three X-RateLimit-* HTTP response headers to a requesting APIclient. What type of information do these response headers indicate to the API client?
A Mule application exposes an HTTPS endpoint and is deployed to three CloudHub workers that donot use static IP addresses. The Mule application expects a high volume of client requests in shorttime periods. What is the most cost-effective infrastructure component that should be used to servethe high volume of client requests?
Which of the following sequence is correct?
What is true about API implementations when dealing with legal regulations that require all data processing to be performed within a certain jurisdiction (such as in the USA or the EU)?
What correctly characterizes unit tests of Mule applications?
An API experiences a high rate of client requests (TPS) vwth small message paytoads. How can usage limits be imposed on the API based on the type of client application?
What is the most performant out-of-the-box solution in Anypoint Platform to track transaction state in an asynchronously executing long-running process implemented as a Mule application deployed to multiple CloudHub workers?
An organization is implementing a Quote of the Day API that caches today's quote. What scenario can use the GoudHub Object Store via the Object Store connector to persist the cache's state?
Select the correct Owner-Layer combinations from below options

Question 37 - MCPA - Level 1 discussion

Report
Export

What API policy would be LEAST LIKELY used when designing an Experience API that is intended to work with a consumer mobile phone or tablet application?

A.
OAuth 2.0 access token enforcement
Answers
A.
OAuth 2.0 access token enforcement
B.
Client ID enforcement
Answers
B.
Client ID enforcement
C.
JSON threat protection
Answers
C.
JSON threat protection
D.
IPwhitellst
Answers
D.
IPwhitellst
Suggested answer:

Explanation:

Answer: IP whitelist

*****************************************

>> OAuth 2.0 access token and Client ID enforcement policies are VERY common to apply on Experience APIs as API consumers need to register and access the APIs using one of these mechanisms

>> JSON threat protection is also VERY common policy to apply on Experience APIs to prevent bad or suspicious payloads hitting the API implementations.

>> IP whitelisting policy is usually very common in Process and System APIs to only whitelist the IP range inside the local VPC. But also applied occassionally on some experience APIs where the End User/ API Consumers are FIXED.

>> When we know the API consumers upfront who are going to access certain Experience APIs, then we can request for static IPs from such consumers and whitelist them to prevent anyone else hitting the API.

However, the experience API given in the question/ scenario is intended to work with a consumer mobile phone or tablet application. Which means, there is no way we can know all possible IPs that are to be whitelisted as mobile phones and tablets can so many in number and any device in the city/state/country/globe.

So, It is very LEAST LIKELY to apply IP Whitelisting on such Experience APIs whose consumers are typically Mobile Phones or Tablets.

Show Answer
asked 18/09/2024
JEAN-MARIE HERMANT
30 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms