Mulesoft Mulesoft Certifications MCIA-LEVEL-1-MAINTENANCE Questions & Answers

• Question 41:

  The implementation of a Process API must change. What is a valid approach that minimizes the impact of this change on API clients?

  A. Implement required changes to the Process API implementation so that whenever possible, the Process API's RAML definition remains unchanged

  B. Update the RAML definition of the current Process API and notify API client developers by sending them links to the updated RAML definition

  C. Postpone changes until API consumers acknowledge they are ready to migrate to a new Process API or API version

  D. Implement the Process API changes in a new API implementation, and have the old API implementation return an HTTP status code 301 - Moved Permanently to inform API clients they should be calling the new API implementation

  Correct Answer: A

  *

  Option B shouldn't be used unless extremely needed, if RAML is changed, client needs to accommodate changes. Question is about minimizing impact on Client. So this is not a valid choice.

  *

  Option C isn't valid as Business can't stop for consumers acknowledgment.

  *

  Option D again needs Client to accommodate changes and isn't viable option.

  *

  Best choice is A where RAML definition isn't changed and underlined functionality is changed without any dependency on client and without impacting client.

• Question 42:

  Which of the below requirements prevent the usage of Anypoint MQ in a company's network? (Choose two answers)

  A. single message payload can be up to 15 MB

  B. payloads must be encrypted

  C. the message broker must be hosted on premises

  D. support for point-to-point messaging

  E. ability for a third party outside the company's network to consume events from the queue

  Correct Answer: CD

• Question 43:

  What Anypoint Connectors support transactions?

  A. Database, JMS, VM

  B. Database, 3MS, HTTP

  C. Database, JMS, VM, SFTP

  D. Database, VM, File

  Correct Answer: A

  Below Anypoint Connectors support transactions JMS Publish Consume VM Publish Consume Database All operations

• Question 44:

  An organization is building a test suite for their applications using m-unit. The integration architect has recommended using test recorder in studio to record the processing flows and then configure unit tests based on the capture events

  What are the two considerations that must be kept in mind while using test recorder

  (Choose two answers)

  A. Tests for flows cannot be created with Mule errors raised inside the flow or already existing in the incoming event

  B. Recorder supports smoking a message before or inside a ForEach processor

  C. The recorder support loops where the structure of the data been tested changes inside the iteration

  D. A recorded flow execution ends successfully but the result does not reach its destination because the application is killed

  E. Mocking values resulting from parallel processes are possible and will not affect the execution of the processes that follow in the test

  Correct Answer: AD

• Question 45:

  Which productivity advantage does Anypoint Platform have to both implement and manage an AP?

  A. Automatic API proxy generation

  B. Automatic API specification generation

  C. Automatic API semantic versioning

  D. Automatic API governance

  Correct Answer: D

• Question 46:

  An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications. The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations. What out-of-thebox Anypoint Platform policy can address exposure to this threat?

  A. Apply a Header injection and removal policy that detects the malicious data before it is used

  B. Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors

  C. Shut out bad actors by using HTTPS mutual authentication for all API invocations

  D. Apply a JSON threat protection policy to all APIs to detect potential threat vectors

  Correct Answer: D

  We need to note few things about the scenario which will help us in reaching the correct solution. Point 1 : The APIs are all publicly available and are associated with several mobile applications and web applications. This means Apply an IP blacklist policy is not viable option. as blacklisting IPs is limited to partial web traffic. It can't be useful for traffic from mobile application Point 2 : The organization does NOT want to use any authentication or compliance policies for these APIs. This means we can not apply HTTPS mutual authentication scheme. Header injection or removal will not help the purpose. By its nature, JSON is vulnerable to JavaScript injection. When you parse the JSON object, the malicious code inflicts its damages. An inordinate increase in the size and depth of the JSON payload can indicate injection. Applying the JSON threat protection policy can limit the size of your JSON payload and thwart recursive additions to the JSON hierarchy. Hence correct answer is Apply a JSON threat protection policy to all APIs to detect potential threat vectors

• Question 47:

  A Mule application currently writes to two separate SQL Server database instances across the internet using a single XA transaction. It is 58. proposed to split this one transaction into two separate non-XA transactions with no other changes to the Mule application.

  What non-functional requirement can be expected to be negatively affected when implementing this change?

  A. Throughput

  B. Consistency

  C. Response time

  D. Availability

  Correct Answer: B

  Correct answer is Consistency as XA transactions are implemented to achieve this. XA transactions are added in the implementation to achieve goal of ACID properties. In the context of transaction processing, the acronym ACID refers to the four key properties of a transaction: atomicity, consistency, isolation, and durability. Atomicity : All changes to data are performed as if they are a single operation. That is, all the changes are performed, or none of them are. For example, in an application that transfers funds from one account to another, the atomicity property ensures that, if a debit is made successfully from one account, the corresponding credit is made to the other account. Consistency : Data is in a consistent state when a transaction starts and when it ends.For example, in an application that transfers funds from one account to another, the consistency property ensures that the total value of funds in both the accounts is the same at the start and end of each transaction. Isolation : The intermediate state of a transaction is invisible to other transactions. As a result, transactions that run concurrently appear to be serialized. For example, in an application that transfers funds from one account to another, the isolation property ensures that another transaction sees the transferred funds in one account or the other, but not in both, nor in neither. Durability : After a transaction successfully completes, changes to data persist and are not undone, even in the event of a system failure. For example, in an application that transfers funds from one account to another, the durability property ensures that the changes made to each account will not be reversed. MuleSoft reference: https://docs.mulesoft.com/mule-runtime/4.3/xa-transactions

• Question 48:

  An organization is designing multiple new applications to run on CloudHub in a single Anypoint VPC and that must share data using a common persistent Anypoint object store V2 (OSv2).

  Which design gives these mule applications access to the same object store instance?

  A. AVM connector configured to directly access the persistence queue of the persistent object store

  B. An Anypoint MQ connector configured to directly access the persistent object store

  C. Object store V2 can be shared across cloudhub applications with the configured osv2 connector

  D. The object store V2 rest API configured to access the persistent object store

  Correct Answer: D

• Question 49:

  A platform architect includes both an API gateway and a service mesh in the architect of a distributed application for communication management.

  Which type of communication management does a service mesh typically perform in this architecture?

  A. Between application services and the firewall

  B. Between the application and external API clients

  C. Between services within the application

  D. Between the application and external API implementations.

  Correct Answer: C

• Question 50:

  A company is modernizing its legal systems lo accelerate access lo applications and data while supporting the adoption of new technologies. The key to achieving this business goal is unlocking the companies' key systems and dala including

  microservices miming under Docker and kubernetes containers using apis.

  Considering the current aggressive backlog and project delivery requirements the company wants to take a strategic approach in the first phase of its transformation projects by quickly deploying API's in mule runtime that are able lo scale,

  connect to on premises systems and migrate as needed.

  Which runtime deployment option supports company's goals?

  A. Customer hosted self provisioned runtimes

  B. Cloudhub runtimes

  C. Runtime fabric on self managed Kubernetes

  D. Runtime fabric on Vmware metal

  Correct Answer: C