Free MCPA-LEVEL-1-MAINTENANCE Exam Braindumps (page: 4)

Page 3 of 21

An API implementation is deployed to CloudHub.
What conditions can be alerted on using the default Anypoint Platform functionality, where the alert conditions depend on the end-to-end request processing of the API implementation?

  1. When the API is invoked by an unrecognized API client
  2. When a particular API client invokes the API too often within a given time period
  3. When the response time of API invocations exceeds a threshold
  4. When the API receives a very high number of API invocations

Answer(s): C

Explanation:

Correct Answer: When the response time of API invocations exceeds a threshold
*****************************************
>> Alerts can be setup for all the given options using the default Anypoint Platform functionality >> However, the question insists on an alert whose conditions depend on the end-to-end request processing of the API implementation.
>> Alert w.r.t "Response Times" is the only one which requires end-to-end request processing of API implementation in order to determine if the threshold is exceeded or not.


Reference:

https://docs.mulesoft.com/api-manager/2.x/using-api-alerts



A Mule application exposes an HTTPS endpoint and is deployed to the CloudHub Shared Worker Cloud. All traffic to that Mule application must stay inside the AWS VPC. To what TCP port do API invocations to that Mule application need to be sent?

  1. 443
  2. 8081
  3. 8091
  4. 8082

Answer(s): D

Explanation:

Correct Answer: 8082
*****************************************
>> 8091 and 8092 ports are to be used when keeping your HTTP and HTTPS app private to the LOCAL VPC respectively.
>> Above TWO ports are not for Shared AWS VPC/ Shared Worker Cloud. >> 8081 is to be used when exposing your HTTP endpoint app to the internet through Shared LB >> 8082 is to be used when exposing your HTTPS endpoint app to the internet through Shared LB

So, API invocations should be sent to port 8082 when calling this HTTPS based app.


Reference:

https://docs.mulesoft.com/runtime-manager/cloudhub-networking-guide https://help.mulesoft.com/s/article/Configure-Cloudhub-Application-to-Send-a-HTTPS-Request- Directly-to-Another-Cloudhub-Application
https://help.mulesoft.com/s/question/0D52T00004mXXULSA4/multiple-http-listerners-on- cloudhub-one-with-port-9090



What is a key requirement when using an external Identity Provider for Client Management in Anypoint Platform?

  1. Single sign-on is required to sign in to Anypoint Platform
  2. The application network must include System APIs that interact with the Identity Provider
  3. To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider
  4. APIs managed by Anypoint Platform must be protected by SAML 2.0 policies

Answer(s): C

Explanation:

https://www.folkstalk.com/2019/11/mulesoft-integration-and-platform.html

Correct Answer: To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider *****************************************
>> It is NOT necessary that single sign-on is required to sign in to Anypoint Platform because we are using an external Identity Provider for Client Management >> It is NOT necessary that all APIs managed by Anypoint Platform must be protected by SAML 2.0 policies because we are using an external Identity Provider for Client Management >> Not TRUE that the application network must include System APIs that interact with the Identity Provider because we are using an external Identity Provider for Client Management Only TRUE statement in the given options is - "To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider"


Reference:

https://docs.mulesoft.com/api-manager/2.x/external-oauth-2.0-token-validation-policy https://blogs.mulesoft.com/dev/api-dev/api-security-ways-to-authenticate-and-authorize/



The responses to some HTTP requests can be cached depending on the HTTP verb used in the request. According to the HTTP specification, for what HTTP verbs is this safe to do?

  1. PUT, POST, DELETE
  2. GET, HEAD, POST
  3. GET, PUT, OPTIONS
  4. GET, OPTIONS, HEAD

Answer(s): D

Explanation:

Correct Answer: GET, OPTIONS, HEAD


Reference:

http://restcookbook.com/HTTP%20Methods/idempotency/






Post your Comments and Discuss MuleSoft MCPA-LEVEL-1-MAINTENANCE exam with other Community members:

MCPA-LEVEL-1-MAINTENANCE Exam Discussions & Posts