Google APIGEE-API-ENGINEER Online Practice Questions and Exam Preparation

Google APIGEE-API-ENGINEER Online Questions & Answers

• Question 31:

  A cloud customer wants to safeguard their APIs against a sudden increase in traffic. You need to calculate an allowable traffic rate of 100 transactions per second (TPS) What should you do?

  A. Use a default Spike Arrest policy setting the limit to 100 TPS
  B. Use a Quota enforcement policy set to limit throughput to 100 TPS
  C. Use a Spike Arrest policy setting the UseEffectiveCount parameter
  D. Keep a count of accesses in the back-end, rejecting queries when they exceed 100 TPS
  A. Use a default Spike Arrest policy setting the limit to 100 TPS

• Question 32:

  In Apigee Edge APIs, what is fault.name?

  A. An out-of-the-box variable populated by Edge when a policy fails
  B. Custom variable that you populate before you Raise Fault
  C. System errors that are only populated in script callouts
  D. Backend error names that are populated along with error code
  E. None of the above
  D. Backend error names that are populated along with error code

• Question 33:

  Which HTTP method would NOT be used for CRUD operations?

  A. GET
  B. POST
  C. OPTIONS
  D. PUT
  C. OPTIONS

• Question 34:

  You are implementing Concurrent Rate Limit, Spike Arrest and Quota policies in your proxy You want to make sure the simplest checks run first Using the flow shown in the diagram, which order of operations should you follow?

  

  A. Concurrent Rate Limit > Spike Arrest > Quota
  B. Quota > Concurrent Rate Limit > Spike Arrest
  C. Spike Arrest > Quota > Concurrent Rate Limit
  D. Quota > Spike Arrest > Concurrent Rate Limit
  B. Quota > Concurrent Rate Limit > Spike Arrest

• Question 35:

  You are adding a filter on an API to locate all orders in a specific date range You want to use a RESTful design Which design should you use?

  A. GET/getOrdersBetweenDates/2016-01-01/2016-02-01
  B. GET/orders'?from-date=2016-01-01andto-date=2016-02-01
  C. GET /customers/{customer-id}/orders'?from-date=2016-01-01andto-date^2016-02-01
  D. POST /searchorders with a post-body of from-date-2016-01-01andto-date=2016-02-01
  C. GET /customers/{customer-id}/orders'?from-date=2016-01-01andto-date^2016-02-01

• Question 36:

  Which will allow me to set the number of maximum elements to be cached in memory in a particular cache resource?

  A. Specify in PopulateCache policy
  B. Specify number of Max Elements In Memory on the Cache Resource definition
  C. Specify max size in KB in Cache Resource definition
  D. It cannot be configured as Apigee manages it internally.
  A. Specify in PopulateCache policy

• Question 37:

  Which use case best fits the authorization code grant type?

  A. The client app is also the resource owner.
  B. The client app was developed internally and is highly trusted
  C. The client app was developed by an untrusted third party
  D. The client app runs on the end user's browser
  B. The client app was developed internally and is highly trusted

• Question 38:

  In which place can outbound SSL be configured?

  A. ProxyEndpoint
  B. HTTPProxyConnection
  C. VirtualHost
  D. TargetEndpoint
  D. TargetEndpoint

• Question 39:

  You are using Apigee Edge as the OAuth Resource Server. The product owner asks you to create an API that logs a user out by revoking OAuth tokens. What should you do?

  A. Use the InvalidateToken operation with cascade=true
  B. Use the InvalidateToken operation with cascade=false
  C. Store a list of revoked tokens in Firebase. On each access, check the list and only allow unrevoked tokens through
  D. Store a list of revoked tokens in Key-Value Maps. On each access, check the list and only allow unrevoked tokens through
  B. Use the InvalidateToken operation with cascade=false

• Question 40:

  Which are NOT a step in the OAuth 2 0 authorization code grant process? Select all that are correct

  A. generate an authorization code
  B. generate an access token
  C. verify the device ID
  D. validate the client API key
  E. obtain the end user's consent for the application to request the user's protected resources F. validate the developer name
  A. generate an authorization code
  E. obtain the end user's consent for the application to request the user's protected resources F. validate the developer name