Mulesoft MuleSoft Certified Architect MCIA-LEVEL-1-MAINTENANCE Questions & Answers

• Question 151:

  Which Mulesoft feature helps users to delegate their access without sharing sensitive credentials or giving full control of accounts to 3rd parties?

  A. Secure Scheme

  B. client id enforcement policy

  C. Connected apps

  D. Certificates

  Correct Answer: C

  Connected Apps The Connected Apps feature provides a framework that enables an external application to integrate with Anypoint Platform using APIs through OAuth 2.0 and OpenID Connect. Connected apps help users delegate their access without sharing sensitive credentials or giving full control of their accounts to third parties. Actions taken by connected apps are audited, and users can also revoke access at any time. Note that some products do not currently include client IDs in this release of the Connected Apps feature. The Connected Apps feature enables you to use secure authentication protocols and control an app's access to user data. Additionally, end users can authorize the app to access their Anypoint Platform data.

  Mule Ref Doc : https://docs.mulesoft.com/access-management/connected-apps-overview

• Question 152:

  What is required before an API implemented using the components of Anypoint Platform can be managed and governed (by applying API policies) on Anypoint Platform?

  A. The API must be published to Anypoint Exchange and a corresponding API instance ID must be obtained from API Manager to be used in the API implementation

  B. The API implementation source code must be committed to a source control management system (such as GitHub)

  C. A RAML definition of the API must be created in API designer so it can then be published to Anypoint Exchange

  D. The API must be shared with the potential developers through an API portal so API consumers can interact with the API

  Correct Answer: A

  Context of the question is about managing and governing mule applications deployed on Anypoint platform. Anypoint API Manager (API Manager) is a component of Anypoint Platform that enables you to manage, govern, and secure APIs. It leverages the runtime capabilities of API Gateway and Anypoint Service Mesh, both of which enforce policies, collect and track analytics data, manage proxies, provide encryption and authentication, and manage applications. Mule Ref Doc : https://docs.mulesoft.com/api-manager/2.x/getting-started-proxy Reference: https://docs.mulesoft.com/api-manager/2.x/api-auto-discovery-new-concept

• Question 153:

  What limits if a particular Anypoint Platform user can discover an asset in Anypoint Exchange?

  A. Design Center and RAML were both used to create the asset

  B. The existence of a public Anypoint Exchange portal to which the asset has been published

  C. The type of the asset in Anypoint Exchange

  D. The business groups to which the user belongs

  Correct Answer: D

  * "The existence of a public Anypoint Exchange portal to which the asset has been published" - question does not mention anything about the public portal. Beside the public portal is open to the internet, to anyone. * If you cannot find an asset in the current business group scopes, search in other scopes. In the left navigation bar click All assets (assets provided by MuleSoft and your own master organization), Provided by MuleSoft, or a business group scope. User belonging to one Business Group can see assets related to his group only Reference: https://docs.mulesoft.com/exchange/to-find-info https://docs.mulesoft.com/exchange/asset-details Correct answer is The business groups to which the user belongs

• Question 154:

  According to the Internet Engineering Task Force (IETF), which supporting protocol does File Transfer Protocol (FTP) use for reliable communication?

  A. A Secure Sockets Layer (SSL)

  B. B Transmission Control Protocol (TCP)

  C. Lightweight Directory Access Protocol (LDAP)

  D. Hypertext Transfer Protocol (HTTP)

  Correct Answer: B

• Question 155:

  According to MuleSoft's recommended REST conventions, which HTTP method should an API use to specify how AP\ clients can request data from a specified resource?

  A. POST

  B. PUT

  C. PATCH

  D. GET

  Correct Answer: D

• Question 156:

  An organization is successfully using API led connectivity, however, as the application network grows, all the manually performed tasks to publish share and discover, register, apply policies to, and deploy an API are becoming repetitive pictures driving the organization to automate this process using efficient CI/'CD pipeline. Considering Anypoint platforms capabilities how should the organization approach automating is API lifecycle?

  A. Use runtime manager rest apis for API management and mavenforAPI deployment

  B. Use Maven with a custom configuration required for the API lifecycle

  C. Use Anypoint CLI or Anypoint Platform REST apis with scripting language such as groovy

  D. Use Exchange rest api's for API management and MavenforAPI deployment

  Correct Answer: D

• Question 157:

  The AnyAirline organization's passenger reservations center is designing an integration solution that combines invocations of three different System APIs (bookFlight, bookHotel, and bookCar) in a business transaction. Each System API makes calls to a single database.

  The entire business transaction must be rolled back when at least one of the APIs fails.

  What is the most idiomatic (used for its intended purpose) way to integrate these APIs in near real-time that provides the best balance of consistency, performance, and reliability?

  A. Implement eXtended Architecture (XA) transactions between the API implementations Coordinate between the API implementations using a Saga pattern Implement caching in each API implementation to improve performance

  B. Implement local transactions within each API implementation Configure each API implementation to also participate in the same eXtended Architecture (XA) transaction Implement caching in each API implementation to improve performance

  C. Implement local transactions in each API implementation Coordinate between the API implementations using a Saga pattern Apply various compensating actions depending on where a failure occurs

  D. Implement an eXtended Architecture (XA) transaction manager in a Mule application using a Saga pattern Connect each API implementation with the Mule application using XA transactions Apply various compensating actions depending on where a failure occurs

  Correct Answer: C

  Reference: https://aws.amazon.com/blogs/compute/building-a-serverless-distributed-application-using-a-saga-orchestration-pattern/

• Question 158:

  A leading e-commerce giant will use Mulesoft API's on runtime fabric (RTF) to process customer orders. Some customer's sensitive information such as credit card information is also there as a part of a API payload.

  What approach minimizes the risk of matching sensitive data to the original and can convert back to the original value whenever and wherever required?

  A. Apply masking to hide the sensitive information and then use API

  B. manager to detokenize the masking format to return the original value

  C. create a tokenization format and apply a tokenization policy to the API Gateway

  D. Used both masking and tokenization

  E. Apply a field level encryption policy in the API Gateway

  Correct Answer: A

• Question 159:

  Refer to the exhibit.

  

  Anypoint Platform supports role-based access control (RBAC) to features of the platform. An organization has configured an external Identity Provider for identity management with Anypoint Platform. What aspects of RBAC must ALWAYS be controlled from the Anypoint Platform control plane and CANNOT be controlled via the external Identity Provider?

  A. Controlling the business group within Anypoint Platform to which the user belongs

  B. Assigning Anypoint Platform permissions to a role

  C. Assigning Anypoint Platform role(s) to a user

  D. Removing a user's access to Anypoint Platform when they no longer work for the organization

  Correct Answer: B

  *

  By default, Anypoint Platform performs its own user management ?For user management, one external IdP can be integrated with the Anypoint Platform organization (note: not at business group level) ?Permissions and access control are still enforced inside Anypoint Platform and CANNOT be controlled via the external Identity Provider * As the Anypoint Platform organization administrator, you can configure identity management in Anypoint Platform to set up users for single sign-on (SSO). * You can map users in a federated organization's group to a role which also gives the flexibility of controlling the business group within Anypoint Platform to which the user belongs to. Also user can nbe removed from external identity management system when they no longer work for the organization. So they wont be able to authenticate using SSO to login to Anypoint Platform. * Using external identity we can no change permissions of a particular role in Mulesoft Anypoint platform.

  *

  So Correct answer is Assigning Anypoint Platform permissions to a role

• Question 160:

  A Mule application uses the Database connector.

  What condition can the Mule application automatically adjust to or recover from without needing to restart or redeploy the Mule application?

  A. One of the stored procedures being called by the Mule application has been renamed

  B. The database server was unavailable for four hours due to a major outage but is now fully operational again

  C. The credentials for accessing the database have been updated and the previous credentials are no longer valid

  D. The database server has been updated and hence the database driver library/JAR needs a minor version upgrade

  Correct Answer: B

  *

  Any change in the application will require a restart except when the issue outside the app. For below situations , you would need to redeploy the code after doing necessary changes -- One of the stored procedures being called by the Mule application has been renamed. In this case, in the Mule application you will have to do changes to accommodate the new stored procedure name. -- Required redesign of Mule applications to follow microservice architecture principles. As code is changed, deployment is must -- If the credentials changed and you need to update the connector or the properties. -- The credentials for accessing the database have been updated and the previous credentials are no longer valid. In this situation you need to restart or redeploy depending on how credentials are configured in Mule application.

  *

  So Correct answer is The database server was unavailable for four hours due to a major outage but is now fully operational again as this is the only external issue to application.