An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?

AShut out bad actors by using HTTPS mutual authentication for all API invocations

BApply an IP blacklist policy to all APIs; the blacklist will Include all bad actors

CApply a Header injection and removal policy that detects the malicious data before it is used

DApply a JSON threat protection policy to all APIs to detect potential threat vectors

1 answers

80 votes

1096

Answer Link

An organization is implementing a Quote of the Day API that caches today's quote.

AWhat scenario can use the GoudHub Object Store via the Object Store connector to persist the cache's state?

BWhen there are three CloudHub deployments of the API implementation to three separate CloudHub regions that must share the cache state

CWhen there are two CloudHub deployments of the API implementation by two Anypoint Platform business groups to the same CloudHub region that must share the cache state

DWhen there is one deployment of the API implementation to CloudHub and anottV deployment to a customer-hosted Mule runtime that must share the cache state

EWhen there is one CloudHub deployment of the API implementation to three CloudHub workers that must share the cache state

1 answers

97 votes

1436

Answer Link

Refer to the exhibit. An organization needs to enable access to their customer data from both a mobile app and a web application, which each need access to common fields as well as certain unique fields.
The data is available partially in a database and partially in a 3rd-party CRM system.
What APIs should be created to best fit these design requirements?

AA Process API that contains the data required by both the web and mobile apps, allowing these applications to invoke it directly and access the data they need thereby providing the flexibility to add more fields in the future without needing API changes

BOne set of APIs (Experience API, Process API, and System API) for the web app, and another set for the mobile app

CSeparate Experience APIs for the mobile and web app, but a common Process API that invokes separate System APIs created for the database and CRM system

DA common Experience API used by both the web and mobile apps, but separate Process APIs for the web and mobile apps that interact with the database and the CRM System

1 answers

93 votes

1078

Answer Link

In an organization, the InfoSec team is investigating Anypoint Platform related data traffic.

AFrom where does most of the data available to Anypoint Platform for monitoring and alerting originate?

BFrom the Mule runtime or the API implementation, depending on the deployment model

CFrom various components of Anypoint Platform, such as the Shared Load Balancer, VPC, and Mule runtimes

DFrom the Mule runtime or the API Manager, depending on the type of data

EFrom the Mule runtime irrespective of the deployment model

1 answers

97 votes

1071

Answer Link

When designing an upstream API and its implementation, the development team has been advised to NOT set timeouts when invoking a downstream API, because that downstream API has no SLA that can be relied upon. This is the only downstream API dependency of that upstream API.

AAssume the downstream API runs uninterrupted without crashing. What is the impact of this advice?

BAn SLA for the upstream API CANNOT be provided

CThe invocation of the downstream API will run to completion without timing out

DA default timeout of 500 ms will automatically be applied by the Mule runtime in which the upstream API implementation executes

EA toad-dependent timeout of less than 1000 ms will be applied by the Mule runtime in which the downstream API implementation executes

1 answers

89 votes

995

Answer Link

MuleSoft MCPA-Level-1 Quiz:2 Topic:1 Questions:6-10

Free Practice Mock Questions Set 6-10 (Quiz # 2) for MuleSoft MCPA-Level-1 Exam, according to official MuleSoft Certified Platform Architect - Level 1 exam syllabus topic # 1

Quiz 1

Quiz 2

Quiz 3