Google Google Certifications APIGEE-API-ENGINEER Questions & Answers

• Question 31:

  If a string value is put in both a cache and a key value map (KVM) using the same key, which one is true?

  A. The object will expire from both locations after the TimeToLive has passed.

  B. The object will be stored in Cassandra twice

  C. When object is retrieved from KVM, the object with the same key will be returned from the cache instead to improve performance

  D. One of the inserts (either to cache or to KVM) will fail as you cant insert the same key twice

  Correct Answer: A

• Question 32:

  The IT security staff is concerned about unexpected increases in traffic on an API with an OAuth authorization flow You want to limit impacts of such traffic increases. What should you do?

  A. Use the Spike Arrest policy, to smooth out traffic spikes.

  B. Use a Quota policy, to ensure that no client exceeds a defined quantity of traffic.

  C. Work with operations to ensure autoscaling is set up to respond to traffic events

  D. Use the Concurrent Rate Limit policy, to ensure back-end services are not overwhelmed

  Correct Answer: C

• Question 33:

  You are composing logs created from user input that contains confidential user information You need to record the presence of all fields, while ensuring that confidential information is not recorded in any log Which approach should you take?

  A. Use a data masking configuration to hide sensitive data from logs

  B. Use conditions to skip logging for data that might contain confidential information.

  C. Work with the administrators of the log aggregators to mask confidential data contents.

  D. Sanitize all data on entry using regular expressions that search for confidential data formats.

  Correct Answer: B

• Question 34:

  Which features are supported in the OAuthV2 policy? Choose 3 answers

  A. Storing of external access tokens

  B. Setting custom attributes for generated access tokens

  C. Credentials validation when password grant_type is used

  D. Setting different expiration for refresh and access tokens

  Correct Answer: BCD

• Question 35:

  Which describe OAuth 2.0 Refresh Tokens'? Select all that are correct

  A. can be used to generate or renew access tokens

  B. is always issued with every access token

  C. can be used to reset crederfflals

  D. may be reused multiple times to create new access tokens

  Correct Answer: ABD

• Question 36:

  Which statements are true for configuring the Edge Microgateway quota plugin? Choose 3 answers

  A. Quotas are only enforced when client authentication is enabled

  B. Quota plugin requires quota-memory plugin to be installed and enabled

  C. Quota plugin requires OAuth Plugin to be installed and enabled

  D. Quota plugin must execute after the quota-memory Plugin execution

  E. Quota plugin must execute after the OAuth Plugin execution

  Correct Answer: ABC

• Question 37:

  Which features are supported in the OAulhV2 policy'? Select all that are correct. Choose 3 answers

  A. setting custom attributes for generated access tokens

  B. storing external access tokens

  C. credentials validation when password grantjype is used

  D. setting different expiration for refresh and access tokens

  Correct Answer: BD

• Question 38:

  Which is a benefit of 2-way TLS (mutual TLS) for target endpoint connections?

  A. Sensitive data presented to end users will be encrypted

  B. Certificates can be used to verify the identity of both Apigee Edge and the target endpoint

  C. End users can use the name of the system to verify that they are connecting to a trusted system.

  D. All of the above

  Correct Answer: B

• Question 39:

  Which is a use of OAuth 2 0 scopes'?

  A. govern the level of access for client applications

  B. select API products for the request

  C. implement SAML security assertions

  D. issue OAuth 2 0 refresh tokens

  Correct Answer: D

• Question 40:

  When implementing a node js application in Edge, what is the only supported configuration for running the application?

  A. ScriptTarget in a ServiceCallout policy

  B. ScriptTarget in a TargetEndpotnt

  C. NodeApp policy

  D. ResourceURL in a Javascript policy

  Correct Answer: A