Which are NOT a step in the OAuth 2 0 authorization code grant process?

• A.generate an authorization code
• B.validate the client API key
• C.obtain the end user's consent for the application to request the user's protected resources
• D.generate an access token
• E.verify the device ID
• F.validate the developer name

Comment: *

Name: *

Email: *

Verification: *

Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
Choose 2 answers

• A.Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
• B.Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
• C.Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
• D.Verify the signature of the JWT using a shared secret.
• E.Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties

Comment: *

Name: *

Email: *

Verification: *

You have the following requirements for your API:
* Authenticate users.
* Identify applications.
* Log update events to StackDriver
* Enforce quotas based on Product configurations
* Alert when total API latency exceeds 500 milliseconds
Your Apigee Edge API proxy is currently implemented with the following Proxy Endpoint configuration

• A.Authenticate applications
• B.Log update events to StackDriver
• C.Enforce quotas based on Product configurations
• D.Authenticate users.
• E.Alert when total API latency exceeds 500 milliseconds

Comment: *

Name: *

Email: *

Verification: *

Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?

• A.Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
• B.Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
• C.Verify the signature of the JWT using a shared secret.
• D.Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
• E.Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters

Comment: *

Name: *

Email: *

Verification: *

You are designing an API that allows a consumer to fetch all orders associated to a given customer. You want to use a RESTful design Which design should you use?

• A.POST /orders with a post-body of customer-id={customer-id}
• B.GET /getOrdersForCustomer?customer-id={customer-id}
• C.GET/orders7customer-id={customer-id}
• D.GET/customers/{customer-id)/orders

Comment: *

Name: *

Email: *

Verification: *