Salesforce MULESOFT-PLATFORM-ARCHITECT-I Online Practice Questions and Exam Preparation

Salesforce MULESOFT-PLATFORM-ARCHITECT-I Online Questions & Answers

• Question 51:

  What is the most performant out-of-the-box solution in Anypoint Platform to track transaction state in an asynchronously executing long-running process implemented as a Mule application deployed to multiple CloudHub workers?

  A. Redis distributed cache
  B. File-based storage
  C. java.util.WeakHashMap
  D. Persistent Object Store
  C. java.util.WeakHashMap

  ---

  Explanation

  Redis distributed cache is performant but NOT out-of-the-box solution in Anypoint Platform File-storage is neither performant nor out-of-the-box solution in Anypoint Platform java.util.WeakHashMap needs a completely custom implementation of cache from scratch using Java code and is limited to the JVM where it is running. Which means the state in the cache is not worker aware when running on multiple

  workers. This type of cache is local to the worker. So, this is neither out-of-the-box nor worker-aware among multiple workers on cloudhub. https://www.baeldung.com/java-weakhashmap

  Persistent Object Store is an out-of-the-box solution provided by Anypoint Platform which is performant as well as worker aware among multiple workers running on CloudHub. https://docs.mulesoft.com/object-store/

  So, Persistent Object Store is the right answer.

• Question 52:

  An organization requires several APIs to be secured with OAuth 2. 0, and PingFederate has been identified as the identity provider for API client authorization.

  The PingFederate Client Provider is configured in access management, and the PingFederate OAuth 2. 0 Token Enforcement policy is configured for the API instances required by the organization.

  The API instances reside in two business groups (Group A and Group B) within the Master Organization (Master Org).

  What should be done to allow API consumers to access the API instances?

  A. The API administrator should configure the correct client discovery URL in both child business groups, and the API consumer should request access to the API in Ping Identity
  B. The API administrator should grant access to the API consumers by creating contracts in the relevant API instances in API Manager
  C. The APL consumer should create a client application and request access to the APT in Anypoint Exchange, and the API administrator should approve the request
  D. The APT consumer should create a client application and request access to the API in Ping Identity, and the organization's Ping Identity workflow will grant access
  C. The APL consumer should create a client application and request access to the APT in Anypoint Exchange, and the API administrator should approve the request

  ---

  Explanation

• Question 53:

  To minimize operation costs, a customer wants to use a CloudHub 1.0 solution. The customer's requirements are:

  1. Separate resources with two Business groups

  2. High-availability (HA) for all APIs

  3. Route traffic via Dedicated load balancer (DLBs)

  4. Separate environments into production and non-production

  Which solution meets the customer's needs?

  A. One production and one non-production Virtual Private Cloud (VPC). Use availability zones to differentiate between Business groups. Allocate maximum CIDR per VPCs to ensure HA across availability zones
  B. One production and one non-production Virtual Private Cloud (VPC) per Business group. Minimize CIDR aligning with projected application total. Choose a MuleSoft CloudHub 1.0 region with multiple availability zones. Deploy multiple workers for HA,
  C. One production and one non-production Virtual Private Cloud (VPC) per Business group. Minimize CIDR aligning with projected application total. Divide availability zones during deployment of APIs for HA.
  D. One production and one non-production Virtual Private Claud (VPC). Configure subnet to differentiate between business groups. Allocate maximum CIDR per VPCs to make it easier to add Child groups. Span VPC to cover three availability zones.
  B. One production and one non-production Virtual Private Cloud (VPC) per Business group. Minimize CIDR aligning with projected application total. Choose a MuleSoft CloudHub 1.0 region with multiple availability zones. Deploy multiple workers for HA,

  ---

  Explanation

• Question 54:

  A company is building an application network using MuleSoft's recommendations for various API layers.

  What is the main (default) role of a process API in an application network?

  A. To secure and optimize the data synchronization processing of large data dumps between back-end systems
  B. To manage and process the secure direct communication between a back-end system and an end-user client of mobile device in the application network
  C. To automate parts of business processes by coordinating and orchestrating the invocation of other APIs in the application network
  D. To secure, Manage, and process communication with specific types of end-user client applications or devices in the application network
  C. To automate parts of business processes by coordinating and orchestrating the invocation of other APIs in the application network

  ---

  Explanation

• Question 55:

  Refer to the exhibits.

  

  Which architectural constraint is compatible with the API-led connectivity architectural style?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

• Question 56:

  Refer to the exhibit.

  

  A developer is building a client application to invoke an API deployed to the STAGING environment that is governed by a client ID enforcement policy. What is required to successfully invoke the API?

  A. The client ID and secret for the Anypoint Platform account owning the API in the STAGING environment
  B. The client ID and secret for the Anypoint Platform account's STAGING environment
  C. The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment
  D. A valid OAuth token obtained from Anypoint Platform and its associated client ID and secret
  C. The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment

  ---

  Explanation

  We CANNOT use the client ID and secret of Anypoint Platform account or any individual environments for accessing the APIs

  As the type of policy that is enforced on the API in question is "Client ID Enforcment Policy", OAuth token based access won't work.

  Right way to access the API is to use the client ID and secret obtained from Anypoint Exchange for the API instance in a particular environment we want to work on.

  References: Managing API instance Contracts on API Manager https://docs.mulesoft.com/api-manager/1.x/request-access-to-api-task https://docs.mulesoft.com/exchange/to-request-access https://docs.mulesoft.com/api-manager/2. x/policy-mule3-client-id-based-policies

• Question 57:

  An organization has built an application network following the API-led connectivity approach recommended by MuleSoft.

  To protect the application network against attacks from malicious external API clients, the organization plans to apply JSON Threat Protection policies.

  To which API-led connectivity layer should the JSON Threat Protection policies most commonly be applied?

  A. All layers
  B. System layer
  C. Process layer
  D. Experience layer
  D. Experience layer

  ---

  Explanation

• Question 58:

  Which APIs can be used with DataGraph to create a unified schema?

  

  A. APIs 1, 3, 5
  B. APIs 2, 4 ,6
  C. APIs 1, 2, s5, 6
  D. APIs 1, 2, 3, 4
  D. APIs 1, 2, 3, 4

  ---

  Explanation

• Question 59:

  Say, there is a legacy CRM system called CRM-Z which is offering below functions:

  1. Customer creation

  2. Amend details of an existing customer

  3. Retrieve details of a customer

  4. Suspend a customer

  A. Implement a system API named customerManagement which has all the functionalities wrapped in it as various operations/resources
  B. Implement different system APIs named createCustomer, amendCustomer, retrieveCustomer and suspendCustomer as they are modular and has seperation of concerns
  C. Implement different system APIs named createCustomerInCRMZ, amendCustomerInCRMZ, retrieveCustomerFromCRMZ and suspendCustomerInCRMZ as they are modular and has seperation of concerns
  B. Implement different system APIs named createCustomer, amendCustomer, retrieveCustomer and suspendCustomer as they are modular and has seperation of concerns

  ---

  Explanation

  It is quite normal to have a single API and different Verb + Resource combinations. However, this fits well for an Experience API or a Process API but not a best architecture style for System APIs. So, option with just one customerManagement API is not the best choice here.

  The option with APIs in createCustomerInCRMZ format is next close choice w.r.t modularization and less maintenance but the naming of APIs is directly coupled with the legacy system. A better foreseen approach would be to name your APIs by abstracting the backend system names as it allows seamless replacement/migration of any backend system anytime. So, this is not the correct choice too.

  createCustomer, amendCustomer, retrieveCustomer and suspendCustomer is the right approach and is the best fit compared to other options as they are both modular and same time got the names decoupled from backend system and it has covered all requirements a System API needs.

• Question 60:

  What do the API invocation metrics provided by Anypoint Platform provide?

  A. ROI metrics from APIs that can be directly shared with business users
  B. Measurements of the effectiveness of the application network based on the level of reuse
  C. Data on past API invocations to help identify anomalies and usage patterns across various APIs
  D. Proactive identification of likely future policy violations that exceed a given threat threshold
  C. Data on past API invocations to help identify anomalies and usage patterns across various APIs

  ---

  Explanation

  API Invocation metrics provided by Anypoint Platform:

  Does NOT provide any Return Of Investment (ROI) related information. So the option suggesting it is OUT.

  Does NOT provide any information w.r.t how APIs are reused, whether there is effective usage of APIs or not etc...

  Does NOT prodive any prediction information as such to help us proactively identify any future policy violations.

  So, the kind of data/information we can get from such metrics is on past API invocations to help identify anomalies and usage patterns across various APIs.