MCPA-Level-1 Exam Dumps – Our Features

An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.What out-of-the-box Anypoint Platform policy can address exposure to this threat?

• Shut out bad actors by using HTTPS mutual authentication for all API invocations
  
• Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
  
• Apply a Header injection and removal policy that detects the malicious data before it is used
  
• Apply a JSON threat protection policy to all APIs to detect potential threat vectors
  

A new upstream API Is being designed to offer an SLA of 500 ms median and 800 ms maximum (99th percentile) response time. The corresponding API implementation needs to sequentially invoke 3 downstream APIs of very similar complexity.The first of these downstream APIs offers the following SLA for its response time: median: 100 ms, 80th percentile: 500 ms, 95th percentile: 1000 ms.If possible, how can a timeout be set in the upstream API for the invocation of the first downstream API to meet the new upstream API's desired SLA?

• Set a timeout of 50 ms; this times out more invocations of that API but gives additional room for retries
  
• Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs to complete
  
• No timeout is possible to meet the upstream API's desired SLA; a different SLA must be negotiated with the first downstream API or invoke an alternative API
  
• Do not set a timeout; the Invocation of this API Is mandatory and so we must wait until it responds
  

What is typically NOT a function of the APIs created within the framework called API-led connectivity?

• They provide an additional layer of resilience on top of the underlying backend system, thereby insulating clients from extended failure of these systems.
  
• They allow for innovation at the user Interface level by consuming the underlying assets without being aware of how data Is being extracted from backend systems.
  
• They reduce the dependency on the underlying backend systems by helping unlock data from backend systems In a reusable and consumable way.
  
• They can compose data from various sources and combine them with orchestration logic to create higher level value.
  

What is a key requirement when using an external Identity Provider for Client Management in Anypoint Platform?

• Single sign-on is required to sign in to Anypoint Platform
  
• The application network must include System APIs that interact with the Identity Provider
  
• To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider
  
• APIs managed by Anypoint Platform must be protected by SAML 2.0 policies
  https://www.folkstalk.com/2019/11/mulesoft-integration-and-platform.html
  

An organization wants MuleSoft-hosted runtime plane features (such as HTTP load balancing, zero downtime, and horizontal and vertical scaling) in its Azure environment. What runtime plane minimizes the organization's effort to achieve these features?

• Anypoint Runtime Fabric
  
• Anypoint Platform for Pivotal Cloud Foundry
  
• CloudHub
  
• A hybrid combination of customer-hosted and MuleSoft-hosted Mule runtimes
  

What is the main change to the IT operating model that MuleSoft recommends to organizations to improve innovation and clock speed?

• Drive consumption as much as production of assets; this enables developers to discover and reuse assets from other projects and encourages standardization
  
• Expose assets using a Master Data Management (MDM) system; this standardizes projects and enables developers to quickly discover and reuse assets from other projects
  
• Implement SOA for reusable APIs to focus on production over consumption; this standardizes on XML and WSDL formats to speed up decision making
  
• Create a lean and agile organization that makes many small decisions everyday; this speeds up decision making and enables each line of business to take ownership of its projects
  

A REST API is being designed to implement a Mule application.What standard interface definition language can be used to define REST APIs?

• Web Service Definition Language(WSDL)
  
• OpenAPI Specification (OAS)
  
• YAML
  
• AsyncAPI Specification
  

An organization has implemented a Customer Address API to retrieve customer address information. This API has been deployed to multiple environments and has been configured to enforce client IDs everywhere.A developer is writing a client application to allow a user to update their address. The developer has found the Customer Address API in Anypoint Exchange and wants to use it in their client application.What step of gaining access to the API can be performed automatically by Anypoint Platform?

• Approve the client application request for the chosen SLA tier
  
• Request access to the appropriate API Instances deployed to multiple environments using the client application's credentials
  
• Modify the client application to call the API using the client application's credentials
  
• Create a new application in Anypoint Exchange for requesting access to the API
  

A company requires Mule applications deployed to CloudHub to be isolated between non-production and production environments. This is so Mule applications deployed to non-production environments can only access backend systems running in their customer-hosted non-production environment, and so Mule applications deployed to production environments can only access backend systems running in their customer-hosted production environment. How does MuleSoft recommend modifying Mule applications, configuring environments, or changing infrastructure to support this type of per-environment isolation between Mule applications and backend systems?

• Modify properties of Mule applications deployed to the production Anypoint Platform environments to prevent access from non-production Mule applications
  
• Configure firewall rules in the infrastructure inside each customer-hosted environment so that only IP addresses from the corresponding Anypoint Platform environments are allowed to communicate with corresponding backend systems
  
• Create non-production and production environments in different Anypoint Platform business groups
  
• Create separate Anypoint VPCs for non-production and production environments, then configure connections to the backend systems in the corresponding customer-hosted environments
  

An Order API must be designed that contains significant amounts of integration logic and involves the invocation of the Product API.The power relationship between Order API and Product API is one of 'Customer/Supplier', because the Product API is used heavily throughout the organization and is developed by a dedicated development team located in the office of the CTO.What strategy should be used to deal with the API data model of the Product API within the Order API?

• Convince the development team of the Product API to adopt the API data model of the Order API such that the integration logic of the Order API can work with one consistent internal data model
  
• Work with the API data types of the Product API directly when implementing the integration logic of the Order API such that the Order API uses the same (unchanged) data types as the Product API
  
• Implement an anti-corruption layer in the Order API that transforms the Product API data model into internal data types of the Order API
  
• Start an organization-wide data modeling initiative that will result in an Enterprise Data Model that will then be used in both the Product API and the Order API