Salesforce MULESOFT-PLATFORM-ARCHITECT-I Online Practice Questions and Exam Preparation

Salesforce MULESOFT-PLATFORM-ARCHITECT-I Online Questions & Answers

• Question 141:

  Which of the following best fits the definition of API-led connectivity?

  A. API-led connectivity is not just an architecture or technology but also a way to organize people and processes for efficient IT delivery in the organization
  B. API-led connectivity is a 3-layered architecture covering Experience, Process and System layers
  C. API-led connectivity is a technology which enabled us to implement Experience, Process and System layer based APIs
  A. API-led connectivity is not just an architecture or technology but also a way to organize people and processes for efficient IT delivery in the organization

  ---

  Explanation

• Question 142:

  The application network is recomposable: it is built for change because it "bends but does not break"

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation

  Application Network is a disposable architecture.

  Which means, it can be altered without disturbing entire architecture and its components.

  It bends as per requirements or design changes but does not break

• Question 143:

  Which two statements are true about the technology architecture of an Anypoint Virtual Private Cloud (VPC)? Choose 2 answers

  A. Ports 8081 and 8082 are used
  B. CIDR blacks are used
  C. Anypoint VPC is responsible for load balancing the applications
  D. Round-robin load balancing is used to distribute client requests across different applications
  E. By default, HTTP requests can be made from the public internet to workers at port 6091
  B. CIDR blacks are used
  E. By default, HTTP requests can be made from the public internet to workers at port 6091

  ---

  Explanation

• Question 144:

  Refer to the exhibit.

  

  An organization uses one specific CloudHub (AWS) region for all CloudHub deployments.

  How are CloudHub workers assigned to availability zones (AZs) when the organization's Mule applications are deployed to CloudHub in that region?

  A. Workers belonging to a given environment are assigned to the same AZ within that region
  B. AZs are selected as part of the Mule application's deployment configuration
  C. Workers are randomly distributed across available AZs within that region
  D. An AZ is randomly selected for a Mule application, and all the Mule application's CloudHub workers are assigned to that one AZ
  C. Workers are randomly distributed across available AZs within that region

  ---

  Explanation

  Currently, we only have control to choose which AWS Region to choose but there is no control at all using any configurations or deployment options to decide what Availability Zone (AZ) to assign to what worker. There are NO fixed or implicit rules on platform too w.r.t assignment of AZ to workers based on environment or application.

  They are completely assigned in random . However, cloudhub definitely ensures that HA is achieved by assigning the workers to more than on AZ so that all workers are not assigned to same AZ for same application.

• Question 145:

  Which scenario is suited for MUnit tests instead of integration tests?

  A. For read-only interactions to any dependencies (such as other web APIs)
  B. When testing does not require knowledge of implementation details
  C. When no mocking is permissible
  D. For tests that are implemented using SoapUI
  A. For read-only interactions to any dependencies (such as other web APIs)

  ---

  Explanation

• Question 146:

  Refer to the exhibit. An organization is running a Mule standalone runtime and has configured Active Directory as the Anypoint Platform external Identity Provider. The organization does not have budget for other system components.

  

  What policy should be applied to all instances of APIs in the organization to most effecuvelyKestrict access to a specific group of internal users?

  A. Apply a basic authentication - LDAP policy; the internal Active Directory will be configured as the LDAP source for authenticating users
  B. Apply a client ID enforcement policy; the specific group of users will configure their client applications to use their specific client credentials
  C. Apply an IP whitelist policy; only the specific users' workstations will be in the whitelist
  D. Apply an OAuth 2. 0 access token enforcement policy; the internal Active Directory will be configured as the OAuth server
  A. Apply a basic authentication - LDAP policy; the internal Active Directory will be configured as the LDAP source for authenticating users

  ---

  Explanation

  IP Whitelisting does NOT fit for this purpose. Moreover, the users workstations may not necessarily have static IPs in the network.

  OAuth 2. 0 enforcement requires a client provider which isn't in the organizations system components.

  It is not an effective approach to let every user create separate client credentials and configure those for their usage.

  The effective way it to apply a basic authentication - LDAP policy and the internal Active Directory will be configured as the LDAP source for authenticating users.

• Question 147:

  A Rate Limiting policy is applied to an API implementation to protect the back-end system. Recently, there have been surges in demand that cause some API client POST requests to the API implementation to be rejected with policy-related errors, causing delays and complications to the API clients.

  How should the API policies that are applied to the API implementation be changed to reduce the frequency of errors returned to API clients, while still protecting the back-end system?

  A. Keep the Rate Limiting policy and add 9 Client ID Enforcement policy
  B. Remove the Rate Limiting policy and add an HTTP Caching policy
  C. Remove the Rate Limiting policy and add a Spike Control policy
  D. Keep the Rate Limiting policy and add an SLA-based Spike Control policy
  D. Keep the Rate Limiting policy and add an SLA-based Spike Control policy

  ---

  Explanation

• Question 148:

  A Mule application exposes an HTTPS endpoint and is deployed to three CloudHub workers that do not use static IP addresses. The Mule application expects a high volume of client requests in short time periods. What is the most cost-effective infrastructure component that should be used to serve the high volume of client requests?

  A. A customer-hosted load balancer
  B. The CloudHub shared load balancer
  C. An API proxy
  D. Runtime Manager autoscaling
  B. The CloudHub shared load balancer

  ---

  Explanation

  The scenario in this question can be split as below:

  There are 3 CloudHub workers (So, there are already good number of workers to handle high volume of requests)

  The workers are not using static IP addresses (So, one CANNOT use customer load-balancing solutions without static IPs)

  Looking for most cost-effective component to load balance the client requests among the workers.

  Based on the above details given in the scenario:

  Runtime autoscaling is NOT at all cost-effective as it incurs extra cost. Most over, there are already 3 workers running which is a good number.

  We cannot go for a customer-hosted load balancer as it is also NOT most cost-effective (needs custom load balancer to maintain and licensing) and same time the Mule App is not having Static IP Addresses which limits from going with

  custom load balancing.

  An API Proxy is irrelevant there as it has no role to play w.r.t handling high volumes or load balancing.

  So, the only right option to go with and fits the purpose of scenario being most cost-effective is - using a CloudHub Shared Load Balancer.

• Question 149:

  A manufacturing company has deployed an API implementation to CloudHub and has not configured it to be automatically restarted by CloudHub when the worker is not responding. Which statement is true when no API Client invokes that API implementation?

  A. No alert on the API invocations and APT implementation can be raised
  B. Alerts on the APT invocation and API implementation can be raised
  C. No alert on the API invocations is raised but alerts on the API implementation can be raised
  D. Alerts on the API invocations are raised but no alerts on the API implementation can be raised
  C. No alert on the API invocations is raised but alerts on the API implementation can be raised

  ---

  Explanation

• Question 150:

  What CANNOT be effectively enforced using an API policy in Anypoint Platform?

  A. Guarding against Denial of Service attacks
  B. Maintaining tamper-proof credentials between APIs
  C. Logging HTTP requests and responses
  D. Backend system overloading
  A. Guarding against Denial of Service attacks

  ---

  Explanation

  Backend system overloading can be handled by enforcing "Spike Control Policy"

  Logging HTTP requests and responses can be done by enforcing "Message Logging Policy"

  Credentials can be tamper-proofed using "Security" and "Compliance" Policies

  However, unfortunately, there is no proper way currently on Anypoint Platform to guard against DOS attacks.