New 2021 MCPA-Level-1 exam questions Welcome to download the newest Real4dumps MCPA-Level-1 PDF dumps (60 Q&As)
P.S. Free 2021 MuleSoft Certified Platform Architect MCPA-Level-1 dumps are available on Google Drive shared by Real4dumps
NEW QUESTION 10
Refer to the exhibit. An organization is running a Mule standalone runtime and has configured Active Directory as the Anypoint Platform external Identity Provider. The organization does not have budget for other system components.
What policy should be applied to all instances of APIs in the organization to most effecuvelyKestrict access to a specific group of internal users?
- A. Apply a basic authentication - LDAP policy; the internal Active Directory will be configured as the LDAP source for authenticating users
- B. Apply an OAuth 2.0 access token enforcement policy; the internal Active Directory will be configured as the OAuth server
- C. Apply a client ID enforcement policy; the specific group of users will configure their client applications to use their specific client credentials
- D. Apply an IP whitelist policy; only the specific users' workstations will be in the whitelist
Answer: A
NEW QUESTION 11
A new upstream API Is being designed to offer an SLA of 500 ms median and 800 ms maximum (99th percentile) response time. The corresponding API implementation needs to sequentially invoke 3 downstream APIs of very similar complexity.
The first of these downstream APIs offers the following SLA for its response time: median: 100 ms, 80th percentile: 500 ms, 95th percentile: 1000 ms.
If possible, how can a timeout be set in the upstream API for the invocation of the first downstream API to meet the new upstream API's desired SLA?
- A. Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs to complete
- B. Set a timeout of 50 ms; this times out more invocations of that API but gives additional room for retries
- C. Do not set a timeout; the Invocation of this API Is mandatory and so we must wait until it responds
- D. No timeout is possible to meet the upstream API's desired SLA; a different SLA must be negotiated with the first downstream API or invoke an alternative API
Answer: B
NEW QUESTION 12
In an organization, the InfoSec team is investigating Anypoint Platform related data traffic.
- A. From the Mule runtime irrespective of the deployment model
- B. From the Mule runtime or the API implementation, depending on the deployment model
- C. From the Mule runtime or the API Manager, depending on the type of data
- D. From where does most of the data available to Anypoint Platform for monitoring and alerting originate?
- E. From various components of Anypoint Platform, such as the Shared Load Balancer, VPC, and Mule runtimes
Answer: B
NEW QUESTION 13
Refer to the exhibit.
What is the best way to decompose one end-to-end business process into a collaboration of Experience, Process, and System APIs?
A) Handle customizations for the end-user application at the Process API level rather than the Experience API level
B) Allow System APIs to return data that is NOT currently required by the identified Process or Experience APIs
C) Always use a tiered approach by creating exactly one API for each of the 3 layers (Experience, Process and System APIs)
D) Use a Process API to orchestrate calls to multiple System APIs, but NOT to other Process APIs
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
NEW QUESTION 14
An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?
- A. Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
- B. Apply a Header injection and removal policy that detects the malicious data before it is used
- C. Shut out bad actors by using HTTPS mutual authentication for all API invocations
- D. Apply a JSON threat protection policy to all APIs to detect potential threat vectors
Answer: A
NEW QUESTION 15
What API policy would LEAST likely be applied to a Process API?
- A. Client ID enforcement
- B. Custom circuit breaker
- C. Rate limiting
- D. JSON threat protection
Answer: D
NEW QUESTION 16
The responses to some HTTP requests can be cached depending on the HTTP verb used in the request.
According to the HTTP specification, for what HTTP verbs is this safe to do?
- A. GET, OPTIONS, HEAD
- B. GET, PUT, OPTIONS
- C. PUT, POST, DELETE
- D. GET, HEAD, POST
Answer: A
Explanation:
Explanation
http://restcookbook.com/HTTP%20Methods/idempotency/
NEW QUESTION 17
What is true about automating interactions with Anypoint Platform using tools such as Anypoint Platform REST APIs, Anypoint CU, or the Mule Maven plugin?
- A. Anypoint Platform APIs can ONLY automate interactions with CloudHub, while the Mule Maven plugin is required for deployment to customer-hosted Mule runtimes
- B. API policies can be applied to the Anypoint Platform APIs so that ONLY certain LOBs have access to specific functions
- C. Access to Anypoint Platform APIs and Anypoint CU can be controlled separately through the roles and permissions in Anypoint Platform, so that specific users can get access to Anypoint CLI white others get access to the platform APIs
- D. By default, the Anypoint CLI and Mule Maven plugin are NOT included in the Mule runtime, so are NOT available to be used by deployed Mule applications
Answer: D
NEW QUESTION 18
What API policy would be LEAST LIKELY used when designing an Experience API that is intended to work with a consumer mobile phone or tablet application?
- A. Client ID enforcement
- B. IPwhitellst
- C. JSON threat protection
- D. OAuth 2.0 access token enforcement
Answer: D
NEW QUESTION 19
What API policy would be LEAST LIKELY used when designing an Experience API that is intended to work with a consumer mobile phone or tablet application?
- A. OAuth 2.0 access token enforcement
- B. Client ID enforcement
- C. JSON threat protection
- D. IP whitelist
Answer: C
NEW QUESTION 20
What CANNOT be effectively enforced using an API policy in Anypoint Platform?
- A. Backend system overloading
- B. Maintaining tamper-proof credentials between APIs
- C. Guarding against Denial of Service attacks
- D. Logging HTTP requests and responses
Answer: C
NEW QUESTION 21
Refer to the exhibit.
Three business processes need to be implemented, and the implementations need to communicate with several different SaaS applications.
These processes are owned by separate (siloed) LOBs and are mainly independent of each other, but do share a few business entities. Each LOB has one development team and their own budget In this organizational context, what is the most effective approach to choose the API data models for the APIs that will implement these business processes with minimal redundancy of the data models?
A) Build several Bounded Context Data Models that align with coherent parts of the business processes and the definitions of associated business entities
B) Build distinct data models for each API to follow established micro-services and Agile API-centric practices
C) Build all API data models using XML schema to drive consistency and reuse across the organization
D) Build one centralized Canonical Data Model (Enterprise Data Model) that unifies all the data types from all three business processes, ensuring the data model is consistent and non-redundant
- A. Option D
- B. Option B
- C. Option A
- D. Option C
Answer: B
NEW QUESTION 22
What Mule application deployment scenario requires using Anypoint Platform Private Cloud Edition or Anypoint Platform for Pivotal Cloud Foundry?
- A. When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data
- B. When ALL backend systems in the application network are deployed in the organization's intranet
- C. When it Is required to make ALL applications highly available across multiple data centers
- D. When it is required that ALL APIs are private and NOT exposed to the public cloud
Answer: B
NEW QUESTION 23
An API implementation is deployed on a single worker on CloudHub and invoked by external API clients (outside of CloudHub). How can an alert be set up that is guaranteed to trigger AS SOON AS that API implementation stops responding to API invocations?
- A. Implement a heartbeat/health check within the API and invoke it from outside the Anypoint Platform and alert when the heartbeat does not respond
- B. Create an alert for when the API receives no requests within a specified time period
- C. Configure a "worker not responding" alert in Anypoint Runtime Manager
- D. Handle API invocation exceptions within the calling API client and raise an alert from that API client when the API Is unavailable
Answer: D
NEW QUESTION 24
How are an API implementation, API client, and API consumer combined to invoke and process an API?
- A. The ApI consumer creates an API client, which sends API invocations to an API such that they are processed by an API implementation
- B. The API consumer creates an API implementation, which receives API invocations from an API such that they are processed for an API client
- C. The API client creates an API consumer, which receives API invocations from an API such that they are processed for an API implementation
- D. The ApI client creates an API consumer, which sends API invocations to an API such that they are processed by an API implementation
Answer: B
NEW QUESTION 25
An organization makes a strategic decision to move towards an IT operating model that emphasizes consumption of reusable IT assets using modern APIs (as defined by MuleSoft).
What best describes each modern API in relation to this new IT operating model?
- A. Each modern API must be easy to consume, so should avoid complex authentication mechanisms such as SAML or JWT D
- B. Each modern API has its own software development lifecycle, which reduces the need for documentation and automation
- C. Each modem API must be treated like a product and designed for a particular target audience (for instance, mobile app developers)
- D. Each modern API must be REST and HTTP based
Answer: C
NEW QUESTION 26
When must an API implementation be deployed to an Anypoint VPC?
- A. When the API implementation must be accessible within a subnet of a restricted customer-hosted network that does not allow public access
- B. When the API Implementation must invoke publicly exposed services that are deployed outside of CloudHub in a customer- managed AWS instance
- C. When the API Implementation must write to a persistent Object Store
- D. When the API implementation must be deployed to a production AWS VPC using the Mule Maven plugin
Answer: B
NEW QUESTION 27
What is a best practice when building System APIs?
- A. Expose to API clients all technical details of the API implementation's interaction wifch the backend system
- B. Model all API resources and methods to closely mimic the operations of the backend system
- C. Build an Enterprise Data Model (Canonical Data Model) for each backend system and apply it to System APIs
- D. Document the API using an easily consumable asset like a RAML definition
Answer: D
NEW QUESTION 28
......
MCPA-Level-1 exam questions from Real4dumps dumps: https://www.real4dumps.com/MCPA-Level-1_examcollection.html (60 Q&As)
