Mulesoft MuleSoft Certified Developer MCD-LEVEL-2 Questions & Answers

• Question 41:

  Refer to the exhibit.

  

  A Mule application pom.xml configures the Maven Resources plugin to exclude parsing binary files in the project's src/main/resources/certs directory.

  Which configuration of this plugin achieves a successful build?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  To configure the Maven Resources plugin to exclude parsing binary files in the project's src/main/resources/certs directory, option C should be used. This option specifies that any files with .cer or .jks extensions under the certs directory should be excluded from filtering. Filtering is a process of replacing placeholders with actual values in resource files during the build process. Binary files should not be filtered because they may become corrupted or unusable. References: https://maven.apache.org/plugins/maven-resources-plugin/examples/filter.html https://maven.apache.org/plugins/maven-resources-plugin/examples/include-exclude.html

• Question 42:

  In a Mule project, Flow-1 contains a flow-ref to Flow-2 depends on data from Flow-1 to execute successfully.

  Which action ensures the test suites and test cases written for Flow-1 and Flow-2 will executesuccessfully?

  A. Chain together the test suites and test cases for Flow-1 and Flow-2

  B. Use `'Set Event to pass the input that is needed, and keep the test cases for Flow-1 and Flow-2 independent

  C. Use `'Before Test Case'' To collect data from Flow-1 test cases before running Flow-2 test cases

  D. Use `After Test Case' to produce the data needed from Flow-1 test cases to pass to Flow-2 test cases

  Correct Answer: B

  To ensure the test suites and test cases written for Flow-1 and Flow-2 will execute successfully, the developer should use a Set Event processor to pass the input that is needed by Flow-2, and keep the test cases for Flow-1 and Flow-2 independent. This way, the developer can isolate the testing of each flow and avoid coupling them together. References:https://docs.mulesoft.com/munit/2.3/munit-test-flow

• Question 43:

  When a client and server are exchanging messages during the mTLS handshake, what is being agreed on during the cipher suite exchange?

  A. A protocol

  B. The TLS version

  C. Anencryption algorithm

  D. The Public key format

  Correct Answer: C

  A cipher suite is a set of cryptographic algorithms that are used to secure the communication between a client and a server. A cipher suite consists of four components: a key exchange algorithm, an authentication algorithm, an encryption algorithm, and a message authentication code (MAC) algorithm. During the cipher suite exchange, the client and the server agree on which encryption algorithm to use for encrypting and decrypting the data. References:https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#cipher-suites

• Question 44:

  Refer to the exhibit.

  

  When creating a new project, which API implementation allows for selecting the correct API version and scaffolding the flows from the API specification?

  A. Import a published API

  B. Generate a local RAML from anypoint Studio

  C. Download RAML from Design Center'

  D. Import RAML from local file

  Correct Answer: A

  To create a new project that selects the correct API version and scaffolds the flows from the API specification, the developer should import a published API. This option allows importing an API specification that has been published to Anypoint Exchange or Design Center, and selecting a specific version of that API specification. The developer can also choose to scaffold flows based on that API specification. References:https://docs.mulesoft.com/apikit/4.x/apikit-4-new-project-task

• Question 45:

  A developer deploys an API to CloudHub and applies an OAuth policy on API Manager. During testing, the API response is slow, so the developer reconfigures the API so that the out-of-the-box HTTP Caching policy is applied first, and the OAuth API policy is applied second.

  What will happen when an HTTP request is received?

  A. In case of a cache hit, both the OAuth and HTTP Caching policies are evaluated; then the cached response is returned to the caller

  B. In case of a cache it, only the HTTP Caching policy is evaluating; then the cached response is returned to the caller

  C. In case of a cache miss, only the HTTP Caching policy is evaluated; then the API retrieves the data from the API implementation, and the policy stores the data to be cached in Object Store

  D. In case of a cache miss, both the OAuth and HTTP Cachingpolicies are evaluated; then the API retrieves the data from the API implementation, and the policy does not store the data in Object Store

  Correct Answer: B

  When an HTTP request is received and the HTTP Caching policy is applied first, it checks if there is a cached response for that request in Object Store. If there is a cache hit, meaning that a valid cached response exists, then only the HTTP Caching policy is evaluated and the cached response is returned to the caller without invoking the OAuth policy or the API implementation. If there is a cache miss, meaning that no valid cached response exists, then both the HTTP Caching policy and the OAuth policy are evaluated before invoking the API implementation. References:https://docs.mulesoft.com/api-manager/2.x/http-caching-policy#policy-ordering

• Question 46:

  Which properties are mandatory on the HTTP Connector configuration in order to use the OAuth 2.0 Authorization Code grant type for authentication?

  A. External callback URL, access token URL,client ID response access token

  B. Token URL, authorization URL, client ID, client secret local callback URL

  C. External callback URL, access token URL, client ID, response refresh token

  D. External callback URL, access token URL, local authorization URL, authorization URL, client ID, client secret

  Correct Answer: B

  To use the OAuth 2.0 Authorization Code grant type for authentication, the HTTP Connector configuration requires the following properties: token URL, authorization URL, client ID, client secret, and local callback URL. The token URL is the endpoint of the authorization server that provides access tokens. The authorization URL is the endpoint of the authorization server that initiates the user consent flow. The client ID and client secret are the credentials of the Mule application registered with the authorization server. The local callback URL is the endpoint of the Mule application that receives the authorization code from the authorization server. References:https://docs.mulesoft.com/http-connector/1.6/http-authentication#oauth-2-0

• Question 47:

  The Center for Enablement team published a common application as a reusable module to the central Nexus repository.

  How can the common application be included in all API implementations?

  A. Download the common application from Naxus and copy it to the src/main/resources folder in the API

  B. Copy the common application's source XML file and out it in a new flow file in the src/main/mule folder

  C. Add a Maven dependency in the PCM file with multiple-plugin as

  D. Add a Maven dependency in the POM file with jar as

  Correct Answer: D

  To include a common application as a reusable module in all API implementations, the developer should add a Maven dependency in the POM file with jar as . This way, the developer can reuse Mule code from another application by packaging it as a JAR file and adding it as a dependency in the POM file of the API implementation. The classifier element specifies that it is a JAR file. References:https://docs.mulesoft.com/mule-runtime/4.3/mmp-concept#add-a-maven-dependency-to-the-pom-file

• Question 48:

  A developer is working on a project that requires encrypting all data before sending it to a backend application. To accomplish this, the developer will use PGP encryption in the Mule 4 Cryptography module.

  What is required to encrypt the data before sending it to the backend application?

  A. The application needs to configure HTTPS TLS context information to encrypt the data

  B. The application needs to both the private and public keys to encrypt the data

  C. The application needs the public key from the backend service to encrypt the data

  D. The application needs the private key from the backend service to encrypt the data

  Correct Answer: C

  To encrypt the data before sending it to the backend application using PGP encryption, the application needs the public key from the backend service. PGP encryption uses a public-key cryptography system, which means that each party has a pair of keys: a public key and a private key. The public key is used to encrypt data, and the private key is used to decrypt data. Therefore, to encrypt data for a specific recipient (the backend service), the application needs to use the recipient's public key. The recipient can then use its own private key to decrypt the data. References:https://docs.mulesoft.com/mule-runtime/4.3/cryptography-pgp

• Question 49:

  A Mule application deployed to multiple Cloudhub 2.0 replicas needs to temporarily persist large files over 10MB between flow executions, and routinely needs to query whether the file data exists on separate executions.

  How can this be achieved?

  A. Store the contents of the file on separate storage, and store the key and location of the file Object using Object Store v2

  B. Use an in-memory Object Store

  C. Store the key and full contents of the file in an Object Store

  D. Store the key and full contents of the file, caching the filename and location between requests

  Correct Answer: A

  To temporarily persist large files over 10MB between flow executions, and routinely query whether the file data exists on separate executions, the developer should store the contents ofthe file on separate storage, and store the key and

  location of the file object using Object Store v2. This way, the developer can avoid storing large files in memory or exceeding the size limit of Object Store v2 (10MB per object). The developer can also use Object Store v2 operations to query,

  retrieve, or delete the file object by its key.

  References:https://docs.mulesoft.com/object-store/osv2-faq#can-i-store-files-in-object-store-v2

• Question 50:

  A Mule API receives a JSON payload and updates the target system with the payload. The developer uses JSON schemas to ensure the data is valid.

  How can the data be validation before posting to the target system?

  A. Use a DataWeave 2.09 transform operation, and at the log of the DataWeave script, add: %dw 2.0 Import.json-moduls

  B. Using the DataWeave if Else condition test the values of the payload against the examples included in the schema

  C. Apply the JSON Schema policy in API Manager and reference the correct schema in the policy configuration

  D. Add the JSON module dependency and add the validate-schema operation in the flow, configured to reference the schema

  Correct Answer: D

  To validate the data before posting to the target system, the developer should add the JSON module dependency and add the validate-schema operation in the flow, configured to reference the schema. The JSON module provides a validate-schema operation that validates a JSON payload against a JSON schema and throws an error if the payload is invalid. References:https://docs.mulesoft.com/json-module/1.1/json-validate-schema