Salesforce Certified MuleSoft Platform Architect 認定 Mule-Arch-201 試験問題:

1. Refer to the exhibit.

A developer is building a client application to invoke an API deployed to the STAGING environment that is governed by a client ID enforcement policy.
What is required to successfully invoke the API?

A) The client ID and secret for the Anypoint Platform account owning the API in the STAGING environment
B) The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment
C) The client ID and secret for the Anypoint Platform account's STAGING environment
D) A valid OAuth token obtained from Anypoint Platform and its associated client ID and secret

2. The asset version 2.0.0 of the Order API is successfully published in Exchange and configured in API Manager with the Autodiscovery API ID correctly linked to the API implementation, A new GET method is added to the existing API specification, and after updates, the asset version of the Order API is 2.0.1, What happens to the Autodiscovery API ID when the new asset version is updated in API Manager?

A) The APLID does not change, so no changes to the APT implementation are needed for the new asset version in the API Autodiscovery global element
B) The APL ID does not change, but the API implementation must be updated in the AP] Autodiscovery global element to indicate the new asset version 2.0.4
C) The API ID changes, but no changes are needed to the API implementation for the new asset version in the API Autediscovery global element because the API ID is automatically updated
D) The APL ID changes, so the API implementation must be updated with the latest API ID for the new asset version in the API Autodiscovery global element

3. An enterprise is embarking on the API-led digital transformation journey, and the central IT team has started to define System APIs. Currently there is no Enterprise Data Model being defined within the enterprise, and the definition of a clean Bounded Context Data Model requires too much effort.
According to MuleSoft's recommended guidelines, how should the System API data model be defined?

A) The data model of the System APIs should make use of data types that approximately mirror those from the back-end systems
B) If there are misspellings of the data fields in the back-end system, Systerm APIs should not correct it, and expose it as-is to mirror the back-end systems
C) The System APIs should expose all back-end system fields
D) The data model should define its own naming convention, and not follow the same naming as the back-end systems

4. An eCommerce company is adding a new Product Details feature to their website, A customer will launch the product catalog page, a new Product Details link will appear by product where they can click to retrieve the product detail description. Product detail data is updated with product update releases, once or twice a year, Presently the database response time has been very slow due to high volume.
What action retrieves the product details with the lowest response time, fault tolerant, and consistent data?

A) Select the product details from a database in a Cache scope and return them within the API response
B) Use an object store to store and retrieve the product details originally read from a database and return them within the API response
C) Select the product details from a database and put them in Anypoint MQ; the Anypoint MO subseriber will receive the product details and return them within the API response
D) Select the product details from a database and return them within the API response

5. An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?

A) Apply a JSON threat protection policy to all APIs to detect potential threat vectors
B) Shut out bad actors by using HTTPS mutual authentication for all API invocations
C) Apply a Header injection and removal policy that detects the malicious data before it is used
D) Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors

質問と回答：