Top MuleSoft MCPA-Level-1 Courses Online - Updated [Nov-2023]
MCPA-Level-1 Practice Dumps - Verified By PracticeTorrent Updated 97 Questions
NEW QUESTION # 23
An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?
- A. Shut out bad actors by using HTTPS mutual authentication for all API invocations
- B. Apply a Header injection and removal policy that detects the malicious data before it is used
- C. Apply a JSON threat protection policy to all APIs to detect potential threat vectors
- D. Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
Answer: D
NEW QUESTION # 24
What do the API invocation metrics provided by Anypoint Platform provide?
- A. ROI metrics from APIs that can be directly shared with business users
- B. Measurements of the effectiveness of the application network based on the level of reuse
- C. Proactive identification of likely future policy violations that exceed a given threat threshold
- D. Data on past API invocations to help identify anomalies and usage patterns across various APIs
Answer: B
Explanation:
Explanation/Reference: https://usermanual.wiki/Document/APAAppNetstudentManual02may2018.991784750.pdf
NEW QUESTION # 25
What Mule application deployment scenario requires using Anypoint Platform Private Cloud Edition or Anypoint Platform for Pivotal Cloud Foundry?
- A. When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data
- B. When it Is required to make ALL applications highly available across multiple data centers
- C. When ALL backend systems in the application network are deployed in the organization's intranet
- D. When it is required that ALL APIs are private and NOT exposed to the public cloud
Answer: C
NEW QUESTION # 26
When using CloudHub with the Shared Load Balancer, what is managed EXCLUSIVELY by the API implementation (the Mule application) and NOT by Anypoint Platform?
- A. The number of DNS entries allocated to the API implementation
- B. The assignment of each HTTP request to a particular CloudHub worker
- C. The SSL certificates used by the API implementation to expose HTTPS endpoints
- D. The logging configuration that enables log entries to be visible in Runtime Manager
Answer: A
NEW QUESTION # 27
An organization uses various cloud-based SaaS systems and multiple on-premises systems. The on-premises systems are an important part of the organization's application network and can only be accessed from within the organization's intranet.
What is the best way to configure and use Anypoint Platform to support integrations with both the cloud-based SaaS systems and on-premises systems?
A) Use CloudHub-deployed Mule runtimes in an Anypoint VPC managed by Anypoint Platform Private Cloud Edition control plane
B) Use CloudHub-deployed Mule runtimes in the shared worker cloud managed by the MuleSoft-hosted Anypoint Platform control plane
C) Use an on-premises installation of Mule runtimes that are completely isolated with NO external network access, managed by the Anypoint Platform Private Cloud Edition control plane
D) Use a combination of Cloud Hub-deployed and manually provisioned on-premises Mule runtimes managed by the MuleSoft-hosted Anypoint Platform control plane
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: A
NEW QUESTION # 28
In which layer of API-led connectivity, does the business logic orchestration reside?
- A. Process Layer
- B. System Layer
- C. Experience Layer
Answer: A
Explanation:
Correct answer: Process Layer
*****************************************
>> Experience layer is dedicated for enrichment of end user experience. This layer is to meet the needs of different API clients/ consumers.
>> System layer is dedicated to APIs which are modular in nature and implement/ expose various individual functionalities of backend systems
>> Process layer is the place where simple or complex business orchestration logic is written by invoking one or many System layer modular APIs So, Process Layer is the right answer.
NEW QUESTION # 29
Refer to the exhibit.
What is a valid API in the sense of API-led connectivity and application networks?
A) Java RMI over TCP
B) Java RMI over TCP
C) CORBA over HOP
D) XML over UDP
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: A
NEW QUESTION # 30
Which layer in the API-led connectivity focuses on unlocking key systems, legacy systems, data sources etc and exposes the functionality?
- A. System Layer
- B. Process Layer
- C. Experience Layer
Answer: A
Explanation:
Correct answer: System Layer
The APIs used in an API-led approach to connectivity fall into three categories:
System APIs - these usually access the core systems of record and provide a means of insulating the user from the complexity or any changes to the underlying systems. Once built, many users, can access data without any need to learn the underlying systems and can reuse these APIs in multiple projects.
Process APIs - These APIs interact with and shape data within a single system or across systems (breaking down data silos) and are created here without a dependence on the source systems from which that data originates, as well as the target channels through which that data is delivered.
Experience APIs - Experience APIs are the means by which data can be reconfigured so that it is most easily consumed by its intended audience, all from a common data source, rather than setting up separate point-to-point integrations for each channel. An Experience API is usually created with API-first design principles where the API is designed for the specific user experience in mind.
NEW QUESTION # 31
An API implementation is deployed on a single worker on CloudHub and invoked by external API clients (outside of CloudHub).
How can an alert be set up that is guaranteed to trigger AS SOON AS that API implementation stops responding to API invocations?
- A. Create an alert for when the API receives no requests within a specified time period.
- B. Configure a "worker not responding" alert in Anypoint Runtime Manager.
- C. Handle API invocation exceptions within the calling API client and raise an alert from that API client when the API is unavailable.
- D. Implement a heartbeat/health check within the API and invoke it from outside the Anypoint Platform and alert when the heartbeat does not respond.
Answer: A
NEW QUESTION # 32
A code-centric API documentation environment should allow API consumers to investigate and execute API client source code that demonstrates invoking one or more APIs as part of representative scenarios.
What is the most effective way to provide this type of code-centric API documentation environment using Anypoint Platform?
- A. Make relevant APIs discoverable via an Anypoint Exchange entry
- B. Create API Notebooks and include them in the relevant Anypoint Exchange entries
- C. Enable mocking services for each of the relevant APIs and expose them via their Anypoint Exchange entry
- D. Ensure the APIs are well documented through their Anypoint Exchange entries and API Consoles and share these pages with all API consumers
Answer: B
Explanation:
Correct answer: Create API Notebooks and Include them in the relevant Anypoint exchange entries
*****************************************
>> API Notebooks are the one on Anypoint Platform that enable us to provide code-centric API documentation Reference:
NEW QUESTION # 33
What CANNOT be effectively enforced using an API policy in Anypoint Platform?
- A. Logging HTTP requests and responses
- B. Guarding against Denial of Service attacks
- C. Backend system overloading
- D. Maintaining tamper-proof credentials between APIs
Answer: B
NEW QUESTION # 34
Refer to the exhibit. An organization needs to enable access to their customer data from both a mobile app and a web application, which each need access to common fields as well as certain unique fields.
The data is available partially in a database and partially in a 3rd-party CRM system.
What APIs should be created to best fit these design requirements?
A) A Process API that contains the data required by both the web and mobile apps, allowing these applications to invoke it directly and access the data they need thereby providing the flexibility to add more fields in the future without needing API changes
B) One set of APIs (Experience API, Process API, and System API) for the web app, and another set for the mobile app
C) Separate Experience APIs for the mobile and web app, but a common Process API that invokes separate System APIs created for the database and CRM system
D) A common Experience API used by both the web and mobile apps, but separate Process APIs for the web and mobile apps that interact with the database and the CRM System
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: B
NEW QUESTION # 35
An organization is deploying their new implementation of the OrderStatus System API to multiple workers in CloudHub. This API fronts the organization's on-premises Order Management System, which is accessed by the API implementation over an IPsec tunnel.
What type of error typically does NOT result in a service outage of the OrderStatus System API?
- A. API Manager has an extended outage during the initial deployment of the API implementation
- B. The AWS region goes offline with a major network failure to the relevant AWS data centers
- C. A CloudHub worker fails with an out-of-memory exception
- D. The Order Management System is Inaccessible due to a network outage in the organization's on-premises data center
Answer: C
Explanation:
Correct answer: A CloudHub worker fails with an out-of-memory exception.
*****************************************
>> An AWS Region itself going down will definitely result in an outage as it does not matter how many workers are assigned to the Mule App as all of those in that region will go down. This is a complete downtime and outage.
>> Extended outage of API manager during initial deployment of API implementation will of course cause issues in proper application startup itself as the API Autodiscovery might fail or API policy templates and polices may not be downloaded to embed at the time of applicaiton startup etc... there are many reasons that could cause issues.
>> A network outage onpremises would of course cause the Order Management System not accessible and it does not matter how many workers are assigned to the app they all will fail and cause outage for sure.
The only option that does NOT result in a service outage is if a cloudhub worker fails with an out-of-memory exception. Even if a worker fails and goes down, there are still other workers to handle the requests and keep the API UP and Running. So, this is the right answer.
NEW QUESTION # 36
What should be ensured before sharing an API through a public Anypoint Exchange portal?
- A. The API should be secured using one of the supported authentication/authorization mechanisms to ensure that data is not compromised
- B. The users needing access to the API should be added to the appropriate role in Anypoint Platform
- C. The visibility level of the API instances of that API that need to be publicly accessible should be set to public visibility
- D. The API should be functional with at least an initial implementation deployed and accessible for users to interact with
Answer: A
NEW QUESTION # 37
What Mule application can have API policies applied by Anypoint Platform to the endpoint exposed by that Mule application?
A) A Mule application that accepts requests over HTTP/1.x
B) A Mule application that accepts JSON requests over TCP but is NOT required to provide a response
C) A Mute application that accepts JSON requests over WebSocket
D) A Mule application that accepts gRPC requests over HTTP/2
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: A
NEW QUESTION # 38
What best explains the use of auto-discovery in API implementations?
- A. It enables Anypoint Analytics to gain insight into the usage of APIs
- B. It enables Anypoint Exchange to discover assets and makes them available for reuse
- C. It enables Anypoint Studio to discover API definitions configured in Anypoint Platform
- D. It makes API Manager aware of API implementations and hence enables it to enforce policies
Answer: D
Explanation:
Correct answer: It makes API Manager aware of API implementations and hence enables it to enforce policies.
*****************************************
>> API Autodiscovery is a mechanism that manages an API from API Manager by pairing the deployed application to an API created on the platform.
>> API Management includes tracking, enforcing policies if you apply any, and reporting API analytics.
>> Critical to the Autodiscovery process is identifying the API by providing the API name and version.
References:
https://docs.mulesoft.com/api-manager/2.x/api-auto-discovery-new-concept
https://docs.mulesoft.com/api-manager/1.x/api-auto-discovery
https://docs.mulesoft.com/api-manager/2.x/api-auto-discovery-new-concept
NEW QUESTION # 39
What is a best practice when building System APIs?
- A. Document the API using an easily consumable asset like a RAML definition
- B. Build an Enterprise Data Model (Canonical Data Model) for each backend system and apply it to System APIs
- C. Expose to API clients all technical details of the API implementation's interaction wifch the backend system
- D. Model all API resources and methods to closely mimic the operations of the backend system
Answer: A
NEW QUESTION # 40
When designing an upstream API and its implementation, the development team has been advised to NOT set timeouts when invoking a downstream API, because that downstream API has no SLA that can be relied upon.
This is the only downstream API dependency of that upstream API.
- A. Assume the downstream API runs uninterrupted without crashing. What is the impact of this advice?
- B. A toad-dependent timeout of less than 1000 ms will be applied by the Mule runtime in which the downstream API implementation executes
- C. An SLA for the upstream API CANNOT be provided
- D. The invocation of the downstream API will run to completion without timing out
- E. A default timeout of 500 ms will automatically be applied by the Mule runtime in which the upstream API implementation executes
Answer: E
NEW QUESTION # 41
......
New (2023) MuleSoft MCPA-Level-1 Exam Dumps: https://www.practicetorrent.com/MCPA-Level-1-practice-exam-torrent.html