What CANNOT be effectively enforced using an API policy in Anypoint Platform?

Guarding against Denial of Service attacks

Maintaining tamper-proof credentials between APIs

Logging HTTP requests and responses

An organization makes a strategic decision to move towards an IT operating model that emphasizes consumption of reusable IT assets using modern APIs (as defined by MuleSoft).What best describes each modern API in relation to this new IT operating model?

Each modem API must be treated like a product and designed for a particular target audience (for instance, mobile app developers)

Each modern API has its own software development lifecycle, which reduces the need for documentation and automation

Each modem API must be treated like a product and designed for a particular target audience (for instance, mobile app developers)

Each modern API must be easy to consume, so should avoid complex authentication mechanisms such as SAML or JWT D

Each modern API must be REST and HTTP based

What API policy would be LEAST LIKELY used when designing an Experience API that is intended to work with a consumer mobile phone or tablet application?

OAuth 2.0 access token enforcement

A new upstream API Is being designed to offer an SLA of 500 ms median and 800 ms maximum (99th percentile) response time. The corresponding API implementation needs to sequentially invoke 3 downstream APIs of very similar complexity.The first of these downstream APIs offers the following SLA for its response time: median: 100 ms, 80th percentile: 500 ms, 95th percentile: 1000 ms.If possible, how can a timeout be set in the upstream API for the invocation of the first downstream API to meet the new upstream API's desired SLA?

Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs to complete

Set a timeout of 50 ms; this times out more invocations of that API but gives additional room for retries

Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs to complete

No timeout is possible to meet the upstream API's desired SLA; a different SLA must be negotiated with the first downstream API or invoke an alternative API

Do not set a timeout; the Invocation of this API Is mandatory and so we must wait until it responds

What is true about automating interactions with Anypoint Platform using tools such as Anypoint Platform REST APIs, Anypoint CU, or the Mule Maven plugin?

By default, the Anypoint CLI and Mule Maven plugin are NOT included in the Mule runtime, so are NOT available to be used by deployed Mule applications

Access to Anypoint Platform APIs and Anypoint CU can be controlled separately through the roles and permissions in Anypoint Platform, so that specific users can get access to Anypoint CLI white others get access to the platform APIs

Anypoint Platform APIs can ONLY automate interactions with CloudHub, while the Mule Maven plugin is required for deployment to customer-hosted Mule runtimes

By default, the Anypoint CLI and Mule Maven plugin are NOT included in the Mule runtime, so are NOT available to be used by deployed Mule applications

API policies can be applied to the Anypoint Platform APIs so that ONLY certain LOBs have access to specific functions

Which of the following best fits the definition of API-led connectivity?

API-led connectivity is not just an architecture or technology but also a way to organize people and processes for efficient IT delivery in the organization

API-led connectivity is a 3-layered architecture covering Experience, Process and System layers

API-led connectivity is a technology which enabled us to implement Experience, Process and System layer based APIs

What are the major benefits of MuleSoft proposed IT Operating Model?

1. Decrease the IT delivery gap 2. Meet various business demands without increasing the IT capacity 3. Make consumption of assets at the rate of production

1. Decrease the IT delivery gap 2. Meet various business demands without increasing the IT capacity 3. Focus on creation of reusable assets first. Upon finishing creation of all the possible assets then inform the LOBs in the organization to start using them

1. Decrease the IT delivery gap 2. Meet various business demands by increasing the IT capacity and forming various IT departments 3. Make consumption of assets at the rate of production

1. Decrease the IT delivery gap 2. Meet various business demands without increasing the IT capacity 3. Make consumption of assets at the rate of production

A Mule application exposes an HTTPS endpoint and is deployed to three CloudHub workers that do not use static IP addresses. The Mule application expects a high volume of client requests in short time periods. What is the most cost-effective infrastructure component that should be used to serve the high volume of client requests?

The CloudHub shared load balancer

A customer-hosted load balancer

The CloudHub shared load balancer

What Mule application deployment scenario requires using Anypoint Platform Private Cloud Edition or Anypoint Platform for Pivotal Cloud Foundry?

When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data

When it Is required to make ALL applications highly available across multiple data centers

When it is required that ALL APIs are private and NOT exposed to the public cloud

When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data

When ALL backend systems in the application network are deployed in the organization's intranet

What is typically NOT a function of the APIs created within the framework called API-led connectivity?

They provide an additional layer of resilience on top of the underlying backend system, thereby insulating clients from extended failure of these systems.

They allow for innovation at the user Interface level by consuming the underlying assets without being aware of how data Is being extracted from backend systems.

They reduce the dependency on the underlying backend systems by helping unlock data from backend systems In a reusable and consumable way.

They can compose data from various sources and combine them with orchestration logic to create higher level value.

An organization has implemented a Customer Address API to retrieve customer address information. This API has been deployed to multiple environments and has been configured to enforce client IDs everywhere.A developer is writing a client application to allow a user to update their address. The developer has found the Customer Address API in Anypoint Exchange and wants to use it in their client application.What step of gaining access to the API can be performed automatically by Anypoint Platform?

Approve the client application request for the chosen SLA tier

Request access to the appropriate API Instances deployed to multiple environments using the client application's credentials

Modify the client application to call the API using the client application's credentials

Create a new application in Anypoint Exchange for requesting access to the API

What is a typical result of using a fine-grained rather than a coarse-grained API deployment model to implement a given business process?

A higher number of discoverable API-related assets in the application network

A decrease in the number of connections within the application network supporting the business process

A higher number of discoverable API-related assets in the application network

A better response time for the end user as a result of the APIs being smaller in scope and complexity

An overall tower usage of resources because each fine-grained API consumes less resources

What correctly characterizes unit tests of Mule applications?

They are typically written using MUnit to run in an embedded Mule runtime that does not require external connectivity

They test the validity of input and output of source and target systems

They must be run in a unit testing environment with dedicated Mule runtimes for the environment

They must be triggered by an external client tool or event source

They are typically written using MUnit to run in an embedded Mule runtime that does not require external connectivity

An organization is deploying their new implementation of the OrderStatus System API to multiple workers in CloudHub. This API fronts the organization's on-premises Order Management System, which is accessed by the API implementation over an IPsec tunnel.What type of error typically does NOT result in a service outage of the OrderStatus System API?

A CloudHub worker fails with an out-of-memory exception

API Manager has an extended outage during the initial deployment of the API implementation

The AWS region goes offline with a major network failure to the relevant AWS data centers

The Order Management System is Inaccessible due to a network outage in the organization's on-premises data center

An Order API must be designed that contains significant amounts of integration logic and involves the invocation of the Product API.The power relationship between Order API and Product API is one of 'Customer/Supplier', because the Product API is used heavily throughout the organization and is developed by a dedicated development team located in the office of the CTO.What strategy should be used to deal with the API data model of the Product API within the Order API?

Implement an anti-corruption layer in the Order API that transforms the Product API data model into internal data types of the Order API

Convince the development team of the Product API to adopt the API data model of the Order API such that the integration logic of the Order API can work with one consistent internal data model

Work with the API data types of the Product API directly when implementing the integration logic of the Order API such that the Order API uses the same (unchanged) data types as the Product API

Implement an anti-corruption layer in the Order API that transforms the Product API data model into internal data types of the Order API

Start an organization-wide data modeling initiative that will result in an Enterprise Data Model that will then be used in both the Product API and the Order API

An API implementation is being designed that must invoke an Order API, which is known to repeatedly experience downtime.For this reason, a fallback API is to be called when the Order API is unavailable.What approach to designing the invocation of the fallback API provides the best resilience?

Search Anypoint Exchange for a suitable existing fallback API, and then implement invocations to this fallback API in addition to the Order API

Create a separate entry for the Order API in API Manager, and then invoke this API as a fallback API if the primary Order API is unavailable

Redirect client requests through an HTTP 307 Temporary Redirect status code to the fallback API whenever the Order API is unavailable

Set an option in the HTTP Requester component that invokes the Order API to instead invoke a fallback API whenever an HTTP 4xx or 5xx response status code is returned from the Order API

How are an API implementation, API client, and API consumer combined to invoke and process an API?

The ApI consumer creates an API client, which sends API invocations to an API such that they are processed by an API implementation

The API consumer creates an API implementation, which receives API invocations from an API such that they are processed for an API client

The API client creates an API consumer, which receives API invocations from an API such that they are processed for an API implementation

The ApI consumer creates an API client, which sends API invocations to an API such that they are processed by an API implementation

The ApI client creates an API consumer, which sends API invocations to an API such that they are processed by an API implementation

What is most likely NOT a characteristic of an integration test for a REST API implementation?

The test runs immediately after the Mule application has been compiled and packaged

The test needs all source and/or target systems configured and accessible

The test runs immediately after the Mule application has been compiled and packaged

The test is triggered by an external HTTP request

The test prepares a known request payload and validates the response payload

An API implementation is updated. When must the RAML definition of the API also be updated?

When the API implementation changes the structure of the request or response messages

When the API implementation changes from interacting with a legacy backend system deployed on-premises to a modern, cloud-based (SaaS) system

When the API implementation is migrated from an older to a newer version of the Mule runtime

When the API implementation is optimized to improve its average response time

An organization wants MuleSoft-hosted runtime plane features (such as HTTP load balancing, zero downtime, and horizontal and vertical scaling) in its Azure environment. What runtime plane minimizes the organization's effort to achieve these features?

Anypoint Platform for Pivotal Cloud Foundry

A hybrid combination of customer-hosted and MuleSoft-hosted Mule runtimes

Say, there is a legacy CRM system called CRM-Z which is offering below functions:1. Customer creation2. Amend details of an existing customer3. Retrieve details of a customer4. Suspend a customer

Implement different system APIs named createCustomer, amendCustomer, retrieveCustomer and suspendCustomer as they are modular and has seperation of concerns

Implement a system API named customerManagement which has all the functionalities wrapped in it as various operations/resources

Implement different system APIs named createCustomer, amendCustomer, retrieveCustomer and suspendCustomer as they are modular and has seperation of concerns

Implement different system APIs named createCustomerInCRMZ, amendCustomerInCRMZ, retrieveCustomerFromCRMZ and suspendCustomerInCRMZ as they are modular and has seperation of concerns

An Anypoint Platform organization has been configured with an external identity provider (IdP) for identity management and client management. What credentials or token must be provided to Anypoint CLI to execute commands against the Anypoint Platform APIs?

The credentials provided by the IdP for identity management

The credentials provided by the IdP for client management

An OAuth 2.0 token generated using the credentials provided by the IdP for client management

An OAuth 2.0 token generated using the credentials provided by the IdP for identity management

A company requires Mule applications deployed to CloudHub to be isolated between non-production and production environments. This is so Mule applications deployed to non-production environments can only access backend systems running in their customer-hosted non-production environment, and so Mule applications deployed to production environments can only access backend systems running in their customer-hosted production environment. How does MuleSoft recommend modifying Mule applications, configuring environments, or changing infrastructure to support this type of per-environment isolation between Mule applications and backend systems?

Create separate Anypoint VPCs for non-production and production environments, then configure connections to the backend systems in the corresponding customer-hosted environments

Modify properties of Mule applications deployed to the production Anypoint Platform environments to prevent access from non-production Mule applications

Configure firewall rules in the infrastructure inside each customer-hosted environment so that only IP addresses from the corresponding Anypoint Platform environments are allowed to communicate with corresponding backend systems

Create non-production and production environments in different Anypoint Platform business groups

Create separate Anypoint VPCs for non-production and production environments, then configure connections to the backend systems in the corresponding customer-hosted environments

An API has been updated in Anypoint exchange by its API producer from version 3.1.1 to 3.2.0 following accepted semantic versioning practices and the changes have been communicated via the APIs public portal. The API endpoint does NOT change in the new version. How should the developer of an API client respond to this change?

The API client code only needs to be changed if it needs to take advantage of the new features

The API producer should be requested to run the old version in parallel with the new one

The API producer should be contacted to understand the change to existing functionality

The API client code only needs to be changed if it needs to take advantage of the new features

The API clients need to update the code on their side and need to do full regression

Question 10: SkippedAn API implementation returns three X-RateLimit-* HTTP response headers to a requesting API client. What type of information do these response headers indicate to the API client?

The remaining capacity allowed by the API implementation

The error codes that result from throttling

A correlation ID that should be sent in the next request

The remaining capacity allowed by the API implementation

A retail company with thousands of stores has an API to receive data about purchases and insert it into a single database. Each individual store sends a batch of purchase data to the API about every 30 minutes. The API implementation uses a database bulk insert command to submit all the purchase data to a database using a custom JDBC driver provided by a data analytics solution provider. The API implementation is deployed to a single CloudHub worker. The JDBC driver processes the data into a set of several temporary disk files on the CloudHub worker, and then the data is sent to an analytics engine using a proprietary protocol. This process usually takes less than a few minutes. Sometimes a request fails. In this case, the logs show a message from the JDBC driver indicating an out-of-file-space message. When the request is resubmitted, it is successful. What is the best way to try to resolve this throughput issue?

Increase the number of CloudHub workers

se a CloudHub autoscaling policy to add CloudHub workers

Use a CloudHub autoscaling policy to increase the size of the CloudHub worker

Increase the size of the CloudHub worker(s)

Increase the number of CloudHub workers

A company has created a successful enterprise data model (EDM). The company is committed to building an application network by adopting modern APIs as a core enabler of the company's IT operating model. At what API tiers (experience, process, system) should the company require reusing the EDM when designing modern API data models?

At the process and system tiers

At the experience and process tiers

At the experience and system tiers

At the process and system tiers

At the experience, process, and system tiers

A system API has a guaranteed SLA of 100 ms per request. The system API is deployed to a primary environment as well as to a disaster recovery (DR) environment, with different DNS names in each environment. An upstream process API invokes the system API and the main goal of this process API is to respond to client requests in the least possible time. In what order should the system APIs be invoked, and what changes should be made in order to speed up the response time for requests from the process API?

In parallel, invoke the system API deployed to the primary environment and the system API deployed to the DR environment, and ONLY use the first response

In parallel, invoke the system API deployed to the primary environment and the system API deployed to the DR environment using a scatter-gather configured with a timeout, and then merge the responses

Invoke the system API deployed to the primary environment, and if it fails, invoke the system API deployed to the DR environment

Invoke ONLY the system API deployed to the primary environment, and add timeout and retry logic to avoid intermittent failures

When must an API implementation be deployed to an Anypoint VPC?

When the API Implementation must invoke publicly exposed services that are deployed outside of CloudHub in a customer- managed AWS instance

When the API implementation must be accessible within a subnet of a restricted customer-hosted network that does not allow public access

When the API implementation must be deployed to a production AWS VPC using the Mule Maven plugin

When the API Implementation must write to a persistent Object Store

What is true about API implementations when dealing with legal regulations that require all data processing to be performed within a certain jurisdiction (such as in the USA or the EU)?

They must te deployed to Anypoint Platform runtime planes that are managed by Anypoint Platform control planes, with both planes in the same Jurisdiction

They must avoid using the Object Store as it depends on services deployed ONLY to the US East region

They must use a Jurisdiction-local external messaging system such as Active MQ rather than Anypoint MQ

They must te deployed to Anypoint Platform runtime planes that are managed by Anypoint Platform control planes, with both planes in the same Jurisdiction

They must ensure ALL data is encrypted both in transit and at rest

An API has been updated in Anypoint Exchange by its API producer from version 3.1.1 to 3.2.0 following accepted semantic versioning practices and the changes have been communicated via the API's public portal.The API endpoint does NOT change in the new version.How should the developer of an API client respond to this change?

The API client code ONLY needs to be changed if it needs to take advantage of new features

The update should be identified as a project risk and full regression testing of the functionality that uses this API should be run

The API producer should be contacted to understand the change to existing functionality

The API producer should be requested to run the old version in parallel with the new one

The API client code ONLY needs to be changed if it needs to take advantage of new features

Mule applications that implement a number of REST APIs are deployed to their own subnet that is inaccessible from outside the organization.External business-partners need to access these APIs, which are only allowed to be invoked from a separate subnet dedicated to partners - called Partner-subnet. This subnet is accessible from the public internet, which allows these external partners to reach it.Anypoint Platform and Mule runtimes are already deployed in Partner-subnet. These Mule runtimes can already access the APIs.What is the most resource-efficient solution to comply with these requirements, while having the least impact on other applications that are currently using the APIs?

Implement (or generate) an API proxy Mule application for each of the APIs, then deploy the API proxies to the Mule runtimes

Redeploy the API implementations to the same servers running the Mule runtimes

Add an additional endpoint to each API for partner-enablement consumption

Duplicate the APIs as Mule applications, then deploy them to the Mule runtimes

When could the API data model of a System API reasonably mimic the data model exposed by the corresponding backend system, with minimal improvements over the backend system's data model?

When a pragmatic approach with only limited isolation from the backend system is deemed appropriate

When there is an existing Enterprise Data Model widely used across the organization

When the System API can be assigned to a bounded context with a corresponding data model

When a pragmatic approach with only limited isolation from the backend system is deemed appropriate

When the corresponding backend system is expected to be replaced in the near future

Refer to the exhibit. An organization uses one specific CloudHub (AWS) region for all CloudHub deployments.How are CloudHub workers assigned to availability zones (AZs) when the organization's Mule applications are deployed to CloudHub in that region?

An AZ is randomly selected for a Mule application, and all the Mule application's CloudHub workers are assigned to that one AZ

Workers belonging to a given environment are assigned to the same AZ within that region

AZs are selected as part of the Mule application's deployment configuration

Workers are randomly distributed across available AZs within that region

An AZ is randomly selected for a Mule application, and all the Mule application's CloudHub workers are assigned to that one AZ

Salesforce Certified MuleSoft Developer I Practice Test 2

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Salesforce Certified MuleSoft Developer I Practice Test 2

Question

Salesforce Certified MuleSoft Developer I Practice Tests

Practice Tests