An API experiences a high rate of client requests (TPS) vwth small message paytoads. How can usage limits be imposed on the API based on the type of client application?
Answer(s): A
Correct Answer: Use an SLA-based rate limiting policy and assign a client application to a matching SLA tier based on its type.*****************************************>> SLA tiers will come into play whenever any limits to be imposed on APIs based on client type Reference: https://docs.mulesoft.com/api-manager/2.x/rate-limiting-and-throttling-sla-based- policies
A code-centric API documentation environment should allow API consumers to investigate and execute API client source code that demonstrates invoking one or more APIs as part of representative scenarios.What is the most effective way to provide this type of code-centric API documentation environment using Anypoint Platform?
Answer(s): C
Correct Answer: Create API Notebooks and Include them in the relevant Anypoint exchange entries*****************************************>> API Notebooks are the one on Anypoint Platform that enable us to provide code-centric API documentation
https://docs.mulesoft.com/exchange/to-use-api-notebook
Refer to the exhibit. An organization is running a Mule standalone runtime and has configured Active Directory as the Anypoint Platform external Identity Provider. The organization does not have budget for other system components. What policy should be applied to all instances of APIs in the organization to most effecuvelyKestrict access to a specific group of internal users?
Correct Answer: Apply a basic authentication - LDAP policy; the internal Active Directory will be configured as the LDAP source for authenticating users.*****************************************>> IP Whitelisting does NOT fit for this purpose. Moreover, the users workstations may not necessarily have static IPs in the network.>> OAuth 2.0 enforcement requires a client provider which isn't in the organizations system components.>> It is not an effective approach to let every user create separate client credentials and configure those for their usage.The effective way it to apply a basic authentication - LDAP policy and the internal Active Directory will be configured as the LDAP source for authenticating users.
https://docs.mulesoft.com/api-manager/2.x/basic-authentication-ldap-concept
What is a best practice when building System APIs?
Answer(s): B
Correct Answer: Model all API resources and methods to closely mimic the operations of the backend system.*****************************************>> There are NO fixed and straight best practices while opting data models for APIs. They are completly contextual and depends on number of factors. Based upon those factors, an enterprise can choose if they have to go with Enterprise Canonical Data Model or Bounded Context Model etc.>> One should NEVER expose the technical details of API implementation to their API clients. Only the API interface/ RAML is exposed to API clients.>> It is true that the RAML definitions of APIs should be as detailed as possible and should reflect most of the documentation. However, just that is NOT enough to call your API as best documented API. There should be even more documentation on Anypoint Exchange with API Notebooks etc. to make and create a developer friendly API and repository..>> The best practice always when creating System APIs is to create their API interfaces by modeling their resources and methods to closely reflect the operations and functionalities of that backend system.
What CANNOT be effectively enforced using an API policy in Anypoint Platform?
Correct Answer: Guarding against Denial of Service attacks*****************************************>> Backend system overloading can be handled by enforcing "Spike Control Policy">> Logging HTTP requests and responses can be done by enforcing "Message Logging Policy">> Credentials can be tamper-proofed using "Security" and "Compliance" PoliciesHowever, unfortunately, there is no proper way currently on Anypoint Platform to guard against DOS attacks.
https://help.mulesoft.com/s/article/DDos-Dos-at
Post your Comments and Discuss Salesforce MuleSoft-Platform-Architect-I exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MuleSoft-Platform-Architect-I content, but please register or login to continue.