MuleSoft Certified Platform Architect Certification Exam Dumps 2023
MuleSoft Certified Platform Architect Certification Exam Dumps 2023
Visit Official SkillCertPro Website :-
MuleSoft Certified Platform Architect Certification Exam Dumps 2023
For a full set of 200+ questions. Go to
https://skillcertpro.com/product/mulesoft-certified-platform-architect-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 1:
When using Cloud Hub with the Shared Load Balancer, what is managed EXCLUSIVELY by the API implementation (the Mule application) and NOT by Any point Platform?
A. The assignment of each HTTP request to a particular Cloud Hub worker
B. The number of DNS entries allocated to the API implementation
C. The SSL certificates used by the API implementation to expose HTTPS endpoints
D. The logging configuration that enables log entries to be visible in Runtime Manager
Answer: C
Explanation:
* Anypoint Platform takes care of:
– The assignment of each HTTP request to a particular CloudHub worker
– The number of DNS entries allocated to the API implementation
– CloudHub Shared Load Balancer certificates are managed by MuleSoft and cannot be configured by customers
API implementation need to take care of:
* The logging configuration that enables log entries to be visible in Runtime Manager irrespective of using SLB
————————————————————————————————————————————————-
Correct Answer: The SSL certificates used by the API implementation to expose HTTPS endpoints
Mule Ref Doc : https://docs.mulesoft.com/runtime-manager/dedicated-load-balancer-tutorial#shared-load-balancers
Question 2:
What is a key requirement when using an external Identity Provider for Client Management in Anypoint Platform?
A. The application network must include System APIs that interact with the Identity Provider
B. To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider
C. Single sign-on is required to sign in to Anypoint Platform
D. APIs managed by Anypoint Platform must be protected by SAML 2.0 policies
Answer: B
Explanation:
>> It is NOT necessary that single sign-on is required to sign in to Anypoint Platform because we are using an external Identity Provider for Client Management
>> It is NOT necessary that all APIs managed by Anypoint Platform must be protected by SAML 2.0 policies because we are using an external Identity Provider for Client Management
>> Not TRUE that the application network must include System APIs that interact with the Identity Provider because we are using an external Identity Provider for Client Management
Only TRUE statement in the given options is – “To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider“
References:
https://docs.mulesoft.com/api-manager/2.x/external-oauth-2.0-token-validation-policy
https://blogs.mulesoft.com/dev/api-dev/api-security-ways-to-authenticate-and-authorize/
Correct Answer: To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider
Question 3:
What is most likely NOT a characteristic of an integration test for a REST API implementation?
A. The test needs all source and/or target systems configured and accessible
B. The test runs immediately after the Mule application has been compiled and packaged
C. The test is triggered by an external HTTP request
D. The test prepares a known request payload and validates the response payload
Answer: A
Explanation:
Reference: https://docs.mulesoft.com/mule-runtime/3.9/testing-strategies#integration-testing
Correct Answer: The test runs immediately after the Mule application has been compiled and packaged
Question 4:
How can the application of a rate limiting API policy be accurately reflected in RAML definition of a API?
A. By refining the resource definitions by adding a description of the rate limiting policy behavior
B. By refining the response definitions by adding the x-ratelimit-* response headers with description, type, and example
C. By refining the request definitions by adding a remaining Requests query parameter with description, type, and example
D. By refining the response definitions by adding the out-of-the-box Anypoint Platform rate-limit-enforcement securityScheme with description, type, and example
Answer: B
Explanation:
* Each response header has information about the current state of the request:
X-Ratelimit-Remaining: The amount of available quota
X-Ratelimit-Limit: The maximum available requests per window
X-Ratelimit-Reset: The remaining time, in milliseconds, until a new window starts
By default, the X-RateLimit headers are disabled in the response. You can enable these headers by selecting Expose Headers when you configure the policy.
When a rate limit is reached, your API should return the following HTTP status code:
429 Too Many Requests
References:
https://docs.mulesoft.com/api-manager/2.x/rate-limiting-and-throttling#response-headers
————————————————————————————————————————————————-
Correct Answer: By refining the response definitions by adding the x-ratelimit-* response headers with description, type, and example
Question 5:
An organization is making a strategic decision to move towards an IT operating model that emphasizes consumption of reusable IT assets using Modern API‘s (as defined by MuleSoft) What best describes each modern API in relation to this new IT operating model?
A. Each modern API must be HTTP and REST based
B. Each Modern API must be treated like a product and designated for a particular target audience (for e.g., mobile app developers)
C. Each Modern API must be easy to consume so should avoid complex authentication mechanisms such as SAML or JWT
D. Each modern API has its own software development lifecycle , which reduces the need for documentation and automation
Answer: B
Explanation:
* Modern APIs adhere to standards (typically HTTP and REST), that are developer-friendly, easily accessible and understood broadly.
* They are treated more like products than code.
* APIs are designed for consumption for specific audiences (e.g., mobile developers), they are documented, and they are versioned in a way that users can have certain expectations of its maintenance and lifecycle.
* Because they are much more standardized, today‘s APIs have a much stronger discipline for security and governance, as well as monitored and managed for performance and scale.
————————————————————————————————————————————————–
Reference: https://www.mulesoft.com/resources/api-strategy
Correct Answer: Each Modern API must be treated like a product and designated for a particular target audience (for e.g., mobile app developers)
For a full set of 200+ questions. Go to
https://skillcertpro.com/product/mulesoft-certified-platform-architect-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 6:
What is the best practice when building System API‘s?
A. Document API using an easily consumable asset like a RAML definition
B. Build an Enterprise Data Model (Canonical Data Model) for each backend system and apply it to System API‘s
C. Expose to API clients all technical details of the API Implementations interaction with the backend system
D. Model all API‘s, resources and methods to closely mimic the operations of the backend system
Answer: D
Explanation:
Correct answer is Model all API‘s, resources and methods to closely mimic the operations of the backend system
Question 7:
An organization is deploying their new implementation of the Order Status System API to multiple workers in CloudHub. This API fronts the organization‘s on-premises Order Management System, which is accessed by the API implementation over an IPsec tunnel. What type of error typically does NOT result in a service outage of the OrderStatus System API?
A. The AWS region goes offline with a major network failure to the relevant AWS data centers
B. A CloudHub worker fails with an out-of-memory exception
C. API Manager has an extended outage during the initial deployment of the API implementation
D. The Order Management System is Inaccessible due to a network outage in the organization‘s on-premises data center
Answer: B
Question 8:
What are 4 important Platform Capabilities offered by Anypoint Platform?
A. API Versioning, API Runtime Execution and Hosting, API Invocation, API Consumer Engagement
B. API Design and Development, API Deprecation, API Versioning, API Consumer Engagement
C. API Design and Development, API Runtime Execution and Hosting, API Operations and Management, API Consumer Engagement
D. API Design and Development, API Runtime Execution and Hosting, API Versioning, API Deprecation
Answer: C
Explanation:
To perform API-led connectivity an organization has to have a certain set of capabilities, some of which are provided by Anypoint Platform:
API design and development
? i.e., the design of APIs and the development of API clients and API implementations
API runtime execution and hosting
? i.e., the deployment and execution of API clients and API implementations with certain runtime characteristics
API operations and management
? i.e., operations and management of APIs and API policies, API implementations and API invocations
API consumer engagement
? i.e., the engagement of developers of API clients and the management of the API clients they develop
——————————————————————————————————————
Correct Answers: API Design and Development, API Runtime Execution and Hosting, API Operations and Management, API Consumer Engagement
Question 9:
Assuming that Organization strictly adheres to REST principles while designing API‘s, which HTTP method out of the below are not considered as SAFE?
A. HEAD
B. PATCH
C. GET
D. OPTIONS
Answer: B
Explanation:
The PATCH method requests that a set of changes described in the request entity be applied to the resource identified by the Request- URI. In a nutshell it is used to modify resource.
The HTTP standard requires the following HTTP methods on any resource to be safe:
GET
HEAD
OPTIONS
Safety must be honored by REST APIs. It is the responsibility of every API implementation to implement GET, HEAD or OPTIONS methods such that they never change the state of a resource.
Question 10:
Which of the below feature is available with Anypoint VPC?
A. Changing private IP address range of the VPC
B. Use of customer-supplied DNS servers
C. Selecting public IP address for CloudHub worker
D. Use of existing AWS VPC to be used for Anypoint VPC
Answer: B
Explanation:
This is possible with Anypoint VPC.
DNS lookups of CloudHub workers in an Anypoint VPC can use customer-supplied DNS servers for particular DNS domains (assuming the DNS server IP addresses are reachable from the Anypoint VPC.
All the other options are incorrect as it cannot be achieved.
— The private IP address range and region must be defined when creating the VPC and cannot be changed
— An existing AWS VPC cannot be re-purposed to become an Anypoint VPC
— Public IP address that is not under the control of the Anypoint VPC admin
For a full set of 200+ questions. Go to
https://skillcertpro.com/product/mulesoft-certified-platform-architect-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.