How to pass Salesforce MuleSoft-Platform-Architect-I exam with the help of dumps?

Question # 1

A European company has customers all across Europe, and the IT department is migrating from an older platform to MuleSoft. The main requirements are that the new platform should allow redeployments with zero downtime and deployment of applications to multiple runtime versions, provide security and speed, and utilize Anypoint MQ as the message service. Which runtime plane should the company select based on the requirements without additional network configuration?

A. Runtime Fabric on VMs / Bare Metal for the runtime plane
B. Customer-hosted runtime plane
C. MuleSoft-hosted runtime plane (CloudHub)
D. Anypoint Runtime Fabric on Self-Managed Kubernetes for the runtime plane

Show Answer

Question # 2

A developer from the Central IT team has created an initial version of the RAML definition in Design Center for an OAuth 2.0-protected System API and published it to Exchange. Another developer from LoB IT discovered the System API in Exchange and would like to leverage it in the Process API. What is the MuleSoft-recommended approach for Process API to invoke the System API?

A. The Process API needs to import an CAuth 2.0 module from Exchange first and update it with OAuth 2.0 credentials before the System API can be invoked
B. The Process API uses property YAML files to store the System API URLs and uses the HTTP Request Connector to invoke the Systerm API
C. The Process APL uses the REST Connect Connector autogenerated in Exchange for the System API
D. The Process API manually updates the Process API POM file to include the System AP as a dependency

Show Answer

Question # 3

The application network is recomposable: it is built for change because it "bends but does not break"

A. TRUE
B. FALSE

Show Answer

Question # 4

An operations team is analyzing the effort needed to set up monitoring of their application network. They are looking at which API invocation metrics can be used to identify and predict trouble without having to write custom scripts or install additional analytics software or tools. Which type of metrics can satisfy this goal of directly identifying and predicting failures?

A. The number and types of API policy violations per day
B. The effectiveness of the application network based on the level of reuse
C. The number and types of past API invocations across the application network
D. The ROI from each APT invocation

Show Answer

Question # 5

When should idempotency be taken into account?

A. When making requests to update currently locked entities
B. When storing the results of s previous request for use in response to subsequent requests
C. When sending concurrent update requests for the same entity
D. When preventing duplicate processing from multiple sent requests

Show Answer

Question # 6

A large lending company has developed an API to unlock data from a database server and web server. The API has been deployed to Anypoint Virtual Private Cloud (VPC) on CloudHub 1.0. The database server and web server are in the customer's secure network and are not accessible through the public internet. The database server is in the customer's AWS VPC, whereas the web server is in the customer's on-premises corporate data center. How can access be enabled for the API to connect with the database server and the web server?

A. Set up VPC peering with AWS VPC and a VPN tunnel to the customer's on-premises corporate data center
B. Set up VPC peering with AWS VPC and the customer's on-premises corporate data center
C. Setup a transit gateway to the customer's on-premises corporate data center through AWS VPC
D. Set up VPC peering with the customer's on-premises corporate data center and a VPN tunnel to AWS VPC

Show Answer

Question # 7

A company is using an on-prem cluster in the data center as a runtime plane and MuleSofthosted control plane. How can the company monitor the detailed performance metrics on the Mule applications deployed to the cluster from the control plane?

A. The settings of the Monitoring section in the control plane must be updated to enable detailed logging on the metrics to be captured
B. Monitoring Agent must be installed on each node in the cluster
C. Due to the potential performance impact on the runtime nodes, the Monitoring agent should be installed on a separate server
D. There is no action needed as the on-prem runtime automatically sends the performance data to the control plane

Show Answer

Question # 8

An organization requires several APIs to be secured with OAuth 2.0, and PingFederate has been identified as the identity provider for API client authorization, The PingFederate Client Provider is configured in access management, and the PingFederate OAuth 2.0 Token Enforcement policy is configured for the API instances required by the organization. The API instances reside in two business groups (Group A and Group B) within the Master Organization (Master Org). What should be done to allow API consumers to access the API instances?

A. The API administrator should configure the correct client discovery URL in both child business groups, and the API consumer should request access to the API in Ping Identity
B. The API administrator should grant access to the API consumers by creating contracts in the relevant API instances in API Manager
C. The APL consumer should create a client application and request access to the APT in Anypoint Exchange, and the API administrator should approve the request
D. The APT consumer should create a client application and request access to the API in Ping Identity, and the organization's Ping Identity workflow will grant access

Show Answer

Question # 9

An API implementation is deployed to CloudHub. What conditions can be alerted on using the default Anypoint Platform functionality, where the alert conditions depend on the API invocations to an API implementation?

A. When the API invocations are sent directly to the internal DNS record of the API implementation
B. When the API invocations are not over-a- secure TLS/SSL communication channel
C. When the APL invecations originate from a geography different than the API
D. When the number of API invocations are below a threshold

Show Answer

Question # 10

An organization has built an application network following the API-led connectivity approach recommended by MuleSoft. To protect the application network against attacks from malicious external API clients, the organization plans to apply JSON Threat Protection policies. To which API-led connectivity layer should the JSON Threat Protection policies most commonly be applied?

A. All layers
B. System layer
C. Process layer
D. Experience layer

Show Answer

Question # 11

A customer wants to monitor and gain insights about the number of requests coming in a given time period as well as to measure key performance indicators (response times, CPU utilization, number of active APIs). Which tool provides these data insights?

A. Anypoint Monitoring
B. APT Manager
C. Runtime Alerts
D. Functional Monitoring

Show Answer

Question # 12

Refer to the exhibit. An organization needs to enable access to their customer data fromboth a mobile app and a web application, which each need access to common fields aswell as certain unique fields.The data is available partially in a database and partially in a 3rd-party CRM system.What APIs should be created to best fit these design requirements?

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 13

What are 4 important Platform Capabilities offered by Anypoint Platform?

A. API Versioning, API Runtime Execution and Hosting, API Invocation, API ConsumerEngagement
B. API Design and Development, API Runtime Execution and Hosting, API Versioning, APIDeprecation
C. API Design and Development, API Runtime Execution and Hosting, API Operations andManagement, API Consumer Engagement
D. API Design and Development, API Deprecation, API Versioning, API ConsumerEngagement

Show Answer

Question # 14

What correctly characterizes unit tests of Mule applications?

A. They test the validity of input and output of source and target systems
B. They must be run in a unit testing environment with dedicated Mule runtimes for theenvironment
C. They must be triggered by an external client tool or event source
D. They are typically written using MUnit to run in an embedded Mule runtime that does notrequire external connectivity

Show Answer

Question # 15

An organization is implementing a Quote of the Day API that caches today's quote.What scenario can use the GoudHub Object Store via the Object Store connector to persistthe cache's state?

A. When there are three CloudHub deployments of the API implementation to threeseparate CloudHub regions that must share the cache state
B. When there are two CloudHub deployments of the API implementation by two AnypointPlatform business groups to the same CloudHub region that must share the cache state
C. When there is one deployment of the API implementation to CloudHub and anottVdeployment to a customer-hosted Mule runtime that must share the cache state
D. When there is one CloudHub deployment of the API implementation to three CloudHub workers that must share the cache state

Show Answer

Question # 16

What is a key requirement when using an external Identity Provider for Client Managementin Anypoint Platform?

A. Single sign-on is required to sign in to Anypoint Platform
B. The application network must include System APIs that interact with the Identity Provider
C. To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients mustsubmit access tokens issued by that same Identity Provider
D. APIs managed by Anypoint Platform must be protected by SAML 2.0 policies

Show Answer

Question # 17

What CANNOT be effectively enforced using an API policy in Anypoint Platform?

A. Guarding against Denial of Service attacks
B. Maintaining tamper-proof credentials between APIs
C. Logging HTTP requests and responses
D. Backend system overloading

Show Answer

Question # 18

An API experiences a high rate of client requests (TPS) vwth small message paytoads.How can usage limits be imposed on the API based on the type of client application?

A. Use an SLA-based rate limiting policy and assign a client application to a matching SLAtier based on its type
B. Use a spike control policy that limits the number of requests for each client applicationtype
C. Use a cross-origin resource sharing (CORS) policy to limit resource sharing betweenclient applications, configured by the client application type
D. Use a rate limiting policy and a client ID enforcement policy, each configured by theclient application type

Show Answer

Question # 19

Which layer in the API-led connectivity focuses on unlocking key systems, legacy systems,data sources etc and exposes the functionality?

A. Experience Layer
B. Process Layer
C. System Layer

Show Answer

Question # 20

What is the most performant out-of-the-box solution in Anypoint Platform to tracktransaction state in an asynchronously executing long-running process implemented as aMule application deployed to multiple CloudHub workers?

A. Redis distributed cache
B. java.util.WeakHashMap
C. Persistent Object Store
D. File-based storage

Show Answer

Question # 21

An Order API must be designed that contains significant amounts of integration logic andinvolves the invocation of the Product API.The power relationship between Order API and Product API is one of "Customer/Supplier",because the Product API is used heavily throughout the organization and is developed by adedicated development team located in the office of the CTO.What strategy should be used to deal with the API data model of the Product API within theOrder API?

A. Convince the development team of the Product API to adopt the API data model of theOrder API such that the integration logic of the Order API can work with one consistentinternal data model
B. Work with the API data types of the Product API directly when implementing theintegration logic of the Order API such that the Order API uses the same (unchanged) datatypes as the Product API
C. Implement an anti-corruption layer in the Order API that transforms the Product API datamodel into internal data types of the Order API
D. Start an organization-wide data modeling initiative that will result in an Enterprise DataModel that will then be used in both the Product API and the Order API

Show Answer

Question # 22

An Order API must be designed that contains significant amounts of integration logic andinvolves the invocation of the Product API.The power relationship between Order API and Product API is one of "Customer/Supplier",because the Product API is used heavily throughout the organization and is developed by adedicated development team located in the office of the CTO.What strategy should be used to deal with the API data model of the Product API within theOrder API?

A. Convince the development team of the Product API to adopt the API data model of theOrder API such that the integration logic of the Order API can work with one consistentinternal data model
B. Work with the API data types of the Product API directly when implementing theintegration logic of the Order API such that the Order API uses the same (unchanged) datatypes as the Product API
C. Implement an anti-corruption layer in the Order API that transforms the Product API datamodel into internal data types of the Order API
D. Start an organization-wide data modeling initiative that will result in an Enterprise DataModel that will then be used in both the Product API and the Order API

Show Answer

Question # 23

A new upstream API Is being designed to offer an SLA of 500 ms median and 800 msmaximum (99th percentile) response time. The corresponding API implementation needs tosequentially invoke 3 downstream APIs of very similar complexity.The first of these downstream APIs offers the following SLA for its response time: median:100 ms, 80th percentile: 500 ms, 95th percentile: 1000 ms. If possible, how can a timeout be set in the upstream API for the invocation of the firstdownstream API to meet the new upstream API's desired SLA?

A. Set a timeout of 50 ms; this times out more invocations of that API but gives additionalroom for retries
B. Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs tocomplete
C. No timeout is possible to meet the upstream API's desired SLA; a different SLA must benegotiated with the first downstream API or invoke an alternative API
D. Do not set a timeout; the Invocation of this API Is mandatory and so we must wait until itresponds

Show Answer

Question # 24

The implementation of a Process API must change. What is a valid approach that minimizes the impact of this change on API clients?

A. Update the RAML definition of the current Process API and notify API client developersby sending them links to the updated RAML definition
B. Postpone changes until API consumers acknowledge they are ready to migrate to a newProcess API or API version
C. Implement required changes to the Process API implementation so that wheneverpossible, the Process API's RAML definition remains unchanged
D. Implement the Process API changes in a new API implementation, and have the old APIimplementation return an HTTP status code 301 - Moved Permanently to inform API clientsthey should be calling the new API implementation

Show Answer

Question # 25

What is true about automating interactions with Anypoint Platform using tools such asAnypoint Platform REST APIs, Anypoint CU, or the Mule Maven plugin?

A. Access to Anypoint Platform APIs and Anypoint CU can be controlled separately through the roles and permissions in Anypoint Platform, so that specific users can getaccess to Anypoint CLI white others get access to the platform APIs
B. Anypoint Platform APIs can ONLY automate interactions with CloudHub, while the MuleMaven plugin is required for deployment to customer-hosted Mule runtimes
C. By default, the Anypoint CLI and Mule Maven plugin are NOT included in the Muleruntime, so are NOT available to be used by deployed Mule applications
D. API policies can be applied to the Anypoint Platform APIs so that ONLY certain LOBshave access to specific functions

Show Answer

Question # 26

Say, there is a legacy CRM system called CRM-Z which is offering below functions:1. Customer creation 2. Amend details of an existing customer3. Retrieve details of a customer4. Suspend a customer

A. Implement a system API named customerManagement which has all the functionalitieswrapped in it as various operations/resources
B. Implement different system APIs named createCustomer, amendCustomer,retrieveCustomer and suspendCustomer as they are modular and has seperation ofconcerns
C. Implement different system APIs named createCustomerInCRMZ,amendCustomerInCRMZ, retrieveCustomerFromCRMZ and suspendCustomerInCRMZ asthey are modular and has seperation of concerns

Show Answer

Question # 27

An organization has several APIs that accept JSON data over HTTP POST. The APIs areall publicly available and are associated with several mobile applications and webapplications.The organization does NOT want to use any authentication or compliance policies for theseAPIs, but at the same time, is worried that some bad actor could send payloads that couldsomehow compromise the applications or servers running the API implementations.What out-of-the-box Anypoint Platform policy can address exposure to this threat?

A. Shut out bad actors by using HTTPS mutual authentication for all API invocations
B. Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
C. Apply a Header injection and removal policy that detects the malicious data before it isused
D. Apply a JSON threat protection policy to all APIs to detect potential threat vectors

Show Answer

Question # 28

Refer to the exhibit. A developer is building a client application to invoke an API deployed to the STAGINGenvironment that is governed by a client ID enforcement policy.What is required to successfully invoke the API?

A. The client ID and secret for the Anypoint Platform account owning the API in theSTAGING environment
B. The client ID and secret for the Anypoint Platform account's STAGING environment
C. The client ID and secret obtained from Anypoint Exchange for the API instance in theSTAGING environment
D. A valid OAuth token obtained from Anypoint Platform and its associated client ID andsecret

Show Answer

Question # 29

What is most likely NOT a characteristic of an integration test for a REST APIimplementation?

A. The test needs all source and/or target systems configured and accessible
B. The test runs immediately after the Mule application has been compiled and packaged
C. The test is triggered by an external HTTP request
D. The test prepares a known request payload and validates the response payload

Show Answer

Question # 30

When using CloudHub with the Shared Load Balancer, what is managed EXCLUSIVELYby the API implementation (the Mule application) and NOT by Anypoint Platform?

A. The assignment of each HTTP request to a particular CloudHub worker
B. The logging configuration that enables log entries to be visible in Runtime Manager
C. The SSL certificates used by the API implementation to expose HTTPS endpoints
D. The number of DNS entries allocated to the API implementation

Show Answer