Google APIGEE-API-ENGINEER Online Practice Questions and Exam Preparation

Google APIGEE-API-ENGINEER Online Questions & Answers

• Question 11:

  Which OAuth 2 0 grant requires redirection'?

  A. Authorization Code
  B. Resource Owner Password Credentials
  C. Refresh Token
  D. Client Credentials
  A. Authorization Code

• Question 12:

  You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?

  A. Create a different URL for updates
  B. Implement user rights checks in the underlying microservice
  C. Use an OAuth2 scope to identify allowed applications and user granted rights
  D. Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token
  B. Implement user rights checks in the underlying microservice

• Question 13:

  You have implemented an Apigee Edge API proxy that includes a new shared flow Before you release to production, you need to ensure all dependencies are readied What should you do?

  A. Execute static code analysis on the bundle
  B. Run automated unit tests in the test environment
  C. Deploy the shared flow to the production environment
  D. Alert the quality analysis team and product owner that you are preparing the release
  D. Alert the quality analysis team and product owner that you are preparing the release

• Question 14:

  You have the following requirements for your API:

  1.

  Authenticate users.

  2.

  Identify applications.

  3.

  Log update events to StackDriver

  4.

  Enforce quotas based on Product configurations

  5.

  Alert when total API latency exceeds 500 milliseconds

  Your Apigee Edge API proxy is currently implemented with the following Proxy Endpoint configuration

  

  Which above 2 requirements have been met with this configuration? Choose 2 answers

  A. Authenticate users.
  B. Authenticate applications
  C. Log update events to StackDriver
  D. Enforce quotas based on Product configurations
  E. Alert when total API latency exceeds 500 milliseconds
  A. Authenticate users.
  D. Enforce quotas based on Product configurations

  ---

  Explanation/Reference:

• Question 15:

  You need to make multiple target system calls in parallel for a single inbound request The response should return to the client app as a single object What should you do?

  A. Use Apigee service callouts
  B. Create route rules for each target endpoint
  C. Create multiple target proxy xmls for each endpoint
  D. Use the Node JS async module to invoke target systems
  B. Create route rules for each target endpoint

• Question 16:

  As an API Engineer your team has had issues with security vulnerabilities and poor coding practices in the past. You would like to improve your team's reputation within the organization. What step could take to improve your process?

  A. Add smoke tests to your CI/CD process
  B. Add code quality analysis into your CI/CD process.
  C. Ask the developers to run unit tests prior to code check-in.
  D. Ask the developers to run anti-virus against the code prior to check in.
  D. Ask the developers to run anti-virus against the code prior to check in.

• Question 17:

  You need to interact with two different back end systems, depending on inbound request data One backend is a default target URL without SSL and another one is a dynamic target URL with 2-Way SSL What should you do?

  A. Use service callouts configuration for each target, and use a condition to decide which to invoke.
  B. Use a Key-Value Map configuration to access SSL and URL information to invoke target systems
  C. Use an AssignMessage policy to override default target URL and define 2-way SSL configuration at runtime
  D. Create another target endpoint with SSL configured and define route rule to pick that depends on available variables.
  D. Create another target endpoint with SSL configured and define route rule to pick that depends on available variables.

• Question 18:

  As an Apigee API Engineer you attend a meeting where a Product Owner would like to release a new feature to customers. There are several teams in the meeting, Backend API team, Apigee API team, and the Security team. The feature will be exposed through the companies external facing website. The architecture allows the website to call the backend APIs directly. The security team raises a concern about the backend APIs being wide open to anyone inside the network, not just the external website. You are later contacted and asked for your teams impacts. How should you reply?

  A. You should recommend an Apigee Edge Access Control policy
  B. You should recommend that the backend API's use TLS v12 to secure their APIs.
  C. You should recommend the use of custom secure headers with time stamp verification
  D. You should recommend a design change that uses a Apigee microgateway in front of the backend APIs.
  B. You should recommend that the backend API's use TLS v12 to secure their APIs.

• Question 19:

  Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take? Choose 2 answers

  A. Verify the signature of the JWT using a shared secret.
  B. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
  C. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
  D. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
  E. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
  B. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
  E. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters

  ---

  Explanation/Reference:

• Question 20:

  You are working with the product owners and uncover an opportunity for new functionality. The product owners ask you to quickly outline the desired functionality. Which approach should you use?

  A. Use a business requirements document.
  B. Use a behavior driven development "given-when-then" script to outline the main steps
  C. Implement a proof of concept
  D. Implement a suite of unit test cases that qualify a working API
  A. Use a business requirements document.