When using CloudHub with the Shared Load Balancer, what is managed EXCLUSIVELY by the API implementation (the Mule application) and NOT by Anypoint Platform?

• A.The SSL certificates used by the API implementation to expose HTTPS endpoints
• B.The assignment of each HTTP request to a particular CloudHub worker
• C.The number of DNS entries allocated to the API implementation
• D.The logging configuration that enables log entries to be visible in Runtime Manager

Comment: *

Name: *

Email: *

Verification: *

When could the API data model of a System API reasonably mimic the data model exposed by the corresponding backend system, with minimal improvements over the backend system's data model?

• A.When the corresponding backend system is expected to be replaced in the near future
• B.When the System API can be assigned to a bounded context with a corresponding data model
• C.When a pragmatic approach with only limited isolation from the backend system is deemed appropriate
• D.When there is an existing Enterprise Data Model widely used across the organization

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An organization needs to enable access to their customer data from both a mobile app and a web application, which each need access to common fields as well as certain unique fields.
The data is available partially in a database and partially in a 3rd-party CRM system.
What APIs should be created to best fit these design requirements?

A) A Process API that contains the data required by both the web and mobile apps, allowing these applications to invoke it directly and access the data they need thereby providing the flexibility to add more fields in the future without needing API changes

B) One set of APIs (Experience API, Process API, and System API) for the web app, and another set for the mobile app

C) Separate Experience APIs for the mobile and web app, but a common Process API that invokes separate System APIs created for the database and CRM system

D) A common Experience API used by both the web and mobile apps, but separate Process APIs for the web and mobile apps that interact with the database and the CRM System

• A.Option C
• B.Option A
• C.Option D
• D.Option B

Comment: *

Name: *

Email: *

Verification: *

An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?

• A.Apply a Header injection and removal policy that detects the malicious data before it is used
• B.Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
• C.Shut out bad actors by using HTTPS mutual authentication for all API invocations
• D.Apply a JSON threat protection policy to all APIs to detect potential threat vectors

Comment: *

Name: *

Email: *

Verification: *

A set of tests must be performed prior to deploying API implementations to a staging environment. Due to data security and access restrictions, untested APIs cannot be granted access to the backend systems, so instead mocked data must be used for these tests. The amount of available mocked data and its contents is sufficient to entirely test the API implementations with no active connections to the backend systems. What type of tests should be used to incorporate this mocked data?

• A.Integration tests
• B.Performance tests
• C.Functional tests (Blackbox)
• D.Unit tests (Whitebox)

Comment: *

Name: *

Email: *

Verification: *