Mulesoft MuleSoft Certified Architect MCIA-LEVEL-1-MAINTENANCE Questions & Answers

• Question 191:

  Refer to the exhibit.

  

  A business process involves the receipt of a file from an external vendor over SFTP. The file needs to be parsed and its content processed, validated, and ultimately persisted to a database. The delivery mechanism is expected to change in the future as more vendors send similar files using other mechanisms such as file transfer or HTTP POST.

  What is the most effective way to design for these requirements in order to minimize the impact of future change?

  A. Use a MuleSoft Scatter-Gather and a MuleSoft Batch Job to handle the different files coming from different sources

  B. Create a Process API to receive the file and process it using a MuleSoft Batch Job while delegating the data save process to a System API

  C. Create an API that receives the file and invokes a Process API with the data contained In the file, then have the Process API process the data using a MuleSoft Batch Job and other System APIs as needed

  D. Use a composite data source so files can be retrieved from various sources and delivered to a MuleSoft Batch Job for processing

  Correct Answer: C

  *

  Scatter-Gather is used for parallel processing, to improve performance. In this scenario, input files are coming from different vendors so mostly at different times. Goal here is to minimize the impact of future change. So scatter Gather is not the correct choice.

  *

  If we use 1 API to receive all files from different Vendors, any new vendor addition will need changes to that 1 API to accommodate new requirements. So Option A and C are also ruled out.

  *

  Correct answer is Create an API that receives the file and invokes a Process API with the data contained in the file, then have the Process API process the data using a MuleSoft Batch Job and other System APIs as needed. Answer to this question lies in the API led connectivity approach.

  *

  API-led connectivity is a methodical way to connect data to applications through a series of reusable and purposeful modern APIs that are each developed to play a specific role ?unlock data from systems, compose data into processes, or deliver an experience. System API : System API tier, which provides consistent, managed, and secure access to backend systems. Process APIs : Process APIs take core assets and combines them with some business logic to create a higher level of value. Experience APIs : These are designed specifically for consumption by a specific end-user app or device. So in case of any future plans , organization can only add experience API on addition of new Vendors, which reuse the already existing process API. It will keep impact minimal.

  

• Question 192:

  An integration team uses Anypoint Platform and follows MuleSoft's recommended approach to full lifecycle API development. Which step should the team's API designer take before the API developers implement the AP! Specification?

  A. Generate test cases using MUnit so the API developers can observe the results of running the API

  B. Use the scaffolding capability of Anypoint Studio to create an API portal based on the API specification

  C. Publish the API specification to Exchange and solicit feedback from the API's consumers

  D. Use API Manager to version the API specification

  Correct Answer: C

• Question 193:

  What API policy would LEAST likely be applied to a Process API?

  A. Custom circuit breaker

  B. Client ID enforcement

  C. Rate limiting

  D. JSON threat protection

  Correct Answer: D

  Key to this question lies in the fact that Process API are not meant to be accessed directly by clients. Lets analyze options one by one. Client ID enforcement : This is applied at process API level generally to ensure that identity of API clients is always known and available for API-based analytics Rate Limiting : This policy is applied on Process Level API to secure API's against degradation of service that can happen in case load received is more than it can handle Custom circuit breaker : This is also quite useful feature on process level API's as it saves the API client the wasted time and effort of invoking a failing API. JSON threat protection : This policy is not required at Process API and rather implemented as Experience API's. This policy is used to safeguard application from malicious attacks by injecting malicious code in JSON object. As ideally Process API's are never called from external world , this policy is never used on Process API's Hence correct answer is JSON threat protection MuleSoft Documentation Reference : https://docs.mulesoft.com/api-manager/2.x/policy-mule3-json-threat

• Question 194:

  What is a core pillar of the MuleSoft Catalyst delivery approach?

  A. Business outcomes

  B. Technology centralization

  C. Process thinking

  D. Scope reduction

  Correct Answer: A

• Question 195:

  A company is building an application network and has deployed four Mule APIs: one experience API, one process API, and two system APIs. The logs from all the APIs are aggregated in an external log aggregation tool. The company wants to trace messages that are exchanged between multiple API implementations. What is the most idiomatic (based on its intended use) identifier that should be used to implement Mule event tracing across the multiple API implementations?

  A. Mule event ID

  B. Mule correlation ID

  C. Client's IP address

  D. DataWeave UUID

  Correct Answer: B

  Correct answer is Mule correlation ID By design, Correlation Ids cannot be changed within a flow in Mule 4 applications and can be set only at source. This ID is part of the Event Context and is generated as soon as the message is received by the application. When a HTTP Request is received, the request is inspected for "X-Correlation-Id" header. If "X- Correlation-Id" header is present, HTTP connector uses this as the Correlation Id. If "X- Correlation-Id" header is NOT present, a Correlation Id is randomly generated. For Incoming HTTP Requests: In order to set a custom Correlation Id, the client invoking the HTTP request must set "X-Correlation-Id" header. This will ensure that the Mule Flow uses this Correlation Id. For Outgoing HTTP Requests: You can also propagate the existing Correlation Id to downstream APIs. By default, all outgoing HTTP Requests send "X- Correlation-Id" header. However, you can choose to set a different value to "X-Correlation- Id" header or set "Send Correlation Id" to NEVER.

• Question 196:

  What is an advantage that Anypoint Platform offers by providing universal API management and Integration-Platform-as-a-Service (iPaaS) capabilities in a unified platform?

  A. Ability to use a single iPaaS to manage and integrate all API gateways

  B. Ability to use a single connector to manage and integrate all APis

  C. Ability to use a single control plane for both full-lifecycle AP] management and integration

  D. Ability to use a single iPaaS to manage all API developer portals

  Correct Answer: C

  Anypoint Platform offers universal API management and Integration- Platform-as-a-Service (iPaaS) capabilities in a unified platform, meaning that it provides a single control plane to manage both full-lifecycle API management and integration. This allows organizations to easily manage their APIs and integrations, as well as deploy APIs and integrations quickly and efficiently. According to the MuleSoft Certified Integration Architect - Level 1 Course Book, "Anypoint Platform provides a unified platform for managing, deploying, and monitoring both API and integration solutions, allowing organizations to quickly and easily build and manage their APIs and integrations."

• Question 197:

  An organization is evaluating using the CloudHub shared Load Balancer (SLB) vs creating a CloudHub dedicated load balancer (DLB). They are evaluating how this choice affects the various types of certificates used by CloudHub deplpoyed Mule applications, including MuleSoft-provided, customer-provided, or Mule application-provided certificates.

  What type of restrictions exist on the types of certificates that can be exposed by the CloudHub Shared Load Balancer (SLB) to external web clients over the public internet?

  A. Only MuleSoft-provided certificates are exposed.

  B. Only customer-provided wildcard certificates are exposed.

  C. Only customer-provided self-signed certificates are exposed.

  D. Only underlying Mule application certificates are exposed (pass-through)

  Correct Answer: A

  https://docs.mulesoft.com/runtime-manager/dedicated-load-balancer-tutorial

• Question 198:

  Additional nodes are being added to an existing customer-hosted Mule runtime cluster to improve performance. Mule applications deployed to this cluster are invoked by API clients through a load balancer.

  What is also required to carry out this change?

  A. A new load balancer must be provisioned to allow traffic to the new nodes in a round- robin fashion

  B. External monitoring tools or log aggregators must be configured to recognize the new nodes

  C. API implementations using an object store must be adjusted to recognize the new nodes and persist to them

  D. New firewall rules must be configured to accommodate communication between API clients and the new nodes

  Correct Answer: B

  *

  Clustering is a group of servers or mule runtime which acts as a single unit.

  *

  Mulesoft Enterprise Edition supports scalable clustering to provide high availability for the Mulesoft application.

  *

  In simple terms, virtual servers composed of multiple nodes and they communicate and share information through a distributed shared memory grid.

  *

  By default, Mulesoft ensures the High availability of applications if clustering implemented.

  *

  Let's consider the scenario one of the nodes in cluster crashed or goes down and under maintenance. In such cases, Mulesoft will ensure that requests are processed by other nodes in the cluster. Mulesoft clustering also ensures that the request is load balanced between all the nodes in a cluster.

  *

  Clustering is only supported by on-premise Mule runtime and it is not supported in Cloudhub. Correct answer is External monitoring tools or log aggregators must be configured to recognize the new nodes

  *

  Rest of the options are automatically taken care of when a new node is added in cluster. Reference: https://docs.mulesoft.com/runtime-manager/cluster-about

• Question 199:

  A marketing organization is designing a Mule application to process campaign data. The Mule application will periodically check for a file in a SFTP location and process the records in the file. The size of the file can vary from 10MB to 5GB.

  Due to the limited availabiltty of vCores, the Mule application is deployed to a single CloudHub worker configured with vCore size 0.2.

  The application must transform and send different formats of this file to three different downstream SFTP locations.

  What is the most idiomatic (used for its intended purpose) and performant way to configure the SFTP operations or event sources to process the large files to support these deployment requirements?

  A. Use an in-memory repeatable stream

  B. Use a file-stored non-repeatable stream

  C. Use an in-memory non-repeatable stream

  D. Use a file-stored repeatable stream

  Correct Answer: A

  Reference: https://docs.mulesoft.com/mule-runtime/4.4/streaming-about

• Question 200:

  A REST API is being designed to implement a Mule application.

  What standard interface definition language can be used to define REST APIs?

  A. Web Service Definition Language(WSDL)

  B. OpenAPI Specification (OAS)

  C. YAML

  D. AsyncAPI Specification

  Correct Answer: B