Google Google Certifications APIGEE-API-ENGINEER Questions & Answers

• Question 101:

  Which JavaScript statement can be used to raise a fault from a JavaScript policy named 'Weather"?

  A. return-1,

  B. return false,

  C. context setVanablefWeather Fault", "true"),

  D. throw "Bad Data";

  Correct Answer: C

• Question 102:

  Which HTTP method would NOT be used for CRUD operations?

  A. GET

  B. POST

  C. OPTIONS

  D. PUT

  Correct Answer: C

• Question 103:

  In Apigee Quota policy, if it is essential that you do NOT allow any API calls over the quota, which configuration option is used?

  A. distributed, non-synchronous

  B. non-distributed, synchronous

  C. distnbuted, synchronous

  D. non-distnbuted, non-synchronous

  Correct Answer: A

• Question 104:

  You are implementing Concurrent Rate Limit, Spike Arrest and Quota policies in your proxy You want to make sure the simplest checks run first Using the flow shown in the diagram, which order of operations should you follow?

  

  A. Concurrent Rate Limit > Spike Arrest > Quota

  B. Quota > Concurrent Rate Limit > Spike Arrest

  C. Spike Arrest > Quota > Concurrent Rate Limit

  D. Quota > Spike Arrest > Concurrent Rate Limit

  Correct Answer: B

• Question 105:

  While testing your Apigee API proxy, you discover that the TargetEndpomt that is called is not what you expect. You have verified that there is a RouteRule that matches conditions, and should be called. What should you do?

  A. Modify the RouteRuies to be more specific.

  B. Create a new proxy for this special condition.

  C. Reorder the RouteRuies so that your condition is found

  D. Add a new TargetServer to handle your specific condition

  Correct Answer: D

• Question 106:

  Your project is growing, and there have been several instances of confusion about the naming of data fields. What should you do?

  A. Enforce a naming convention using a static code analysis tool.

  B. Ask developers to do more code reviews, and focus on the names of fields.

  C. Create a basic data dictionary that covers common use cases and rules for naming

  D. Create a unified data model that attempts to model all use cases for each object type

  Correct Answer: C

• Question 107:

  Your implementation has the following characteristics

  1 There are multiple API Products

  2 Some API proxies are part of more than one API Product.

  3 Quotas are configured at the API Product level

  4 In the Quota policy the count, time interval and unit is referenced using Verify API Key flow variables at runtime.

  5 A single Quota policy is reused across all the products 6. Each app is assigned to exactly one product.

  You need to limit the number of requests during weekends for specific products without modifying this design What should you do?

  A. Add custom attributes for counts for every product. Create custom quota policies for every product which references these custom attributes

  B. Set custom attributes for weekday and weekend count at every product Reference these How variables in the count property of Quota policy at runtime

  C. Add custom attributes at the API Product with counts to use for weekdays and weekends. Using flow variables, reference the custom counts in the Quota policy

  D. Add custom attributes for count at Product level Use a JS Policy to determine which count to use in Quota policy at runtime Use this count attribute in the Quota Policy.

  Correct Answer: B

• Question 108:

  Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take? Choose 2 answers

  A. Verify the signature of the JWT using a shared secret.

  B. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid

  C. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties

  D. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties

  E. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters

  Correct Answer: BE

• Question 109:

  How many times can an authorization code be used to obtain an access token?

  A. 1

  B. 2

  C. 5

  D. Unlimited until it expires

  E. Unlimited as long as requests come within specified time of authorization code creation

  Correct Answer: A

• Question 110:

  You are designing an API that allows a consumer to fetch all orders associated to a given customer. You want to use a RESTful design Which design should you use?

  A. GET/customers/{customer-id)/orders

  B. GET/orders7customer-id={customer-id}

  C. GET /getOrdersForCustomer?customer-id={customer-id}

  D. POST /orders with a post-body of customer-id={customer-id}

  Correct Answer: B