Pass Your Exam With 100% Verified MuleSoft-Integration-Architect-I Exam Questions
MuleSoft-Integration-Architect-I Dumps PDF - MuleSoft-Integration-Architect-I Real Exam Questions Answers
NEW QUESTION # 142
An organization has implemented a continuous integration (CI) lifecycle that promotes Mule applications through code, build, and test stages. To standardize the organization's CI journey, a new dependency control approach is being designed to store artifacts that include information such as dependencies, versioning, and build promotions.
To implement these process improvements, the organization will now require developers to maintain all dependencies related to Mule application code in a shared location.
What is the most idiomatic (used for its intended purpose) type of system the organization should use in a shared location to standardize all dependencies related to Mule application code?
- A. The Anypoint Object Store service at cloudhub.io
- B. A binary artifact repository
- C. A MuleSoft-managed repository at repository.mulesoft.org
- D. API Community Manager
Answer: D
NEW QUESTION # 143
A mule application designed to fulfil two requirements
a) Processing files are synchronously from an FTPS server to a back-end database using VM intermediary queues for load balancing VM events b) Processing a medium rate of records from a source to a target system using batch job scope Considering the processing reliability requirements for FTPS files, how should VM queues be configured for processing files as well as for the batch job scope if the application is deployed to Cloudhub workers?
- A. Use Cloud hub persistent VM queues for FTPS file processing
Disable VM queue for the batch job scope - B. Use Cloud hub persistent VM queue for FTPS file processing
There is no need to configure VM queues for the batch jobs scope as it uses by default the worker's JVM memory for VM queueing - C. Use Cloud hub persistent queues for FTPS files processing
There is no need to configure VM queues for the batch jobs scope as it uses by default the worker's disc for VM queueing - D. Use VM connector persistent queues for FTPS file processing Disable VM queue for the batch job scope
Answer: A
NEW QUESTION # 144
An organization's security policies mandate complete control of the login credentials used to log in to Anypoint Platform. What feature of Anypoint Platform should be used to meet this requirement?
- A. Client ID Secret
- B. Enterprise Security Module
- C. Federated Identity Management
- D. Federated Client Management
Answer: C
Explanation:
Correct answer is Federated Identity Management As the Anypoint Platform organization administrator, you can configure identity management in Anypoint Platform to set up users for single sign-on (SSO). Configure identity management using one of the following single sign-on standards: OpenID Connect: End user identity verification by an authorization server including SSO SAML 2.0: Web-based authorization including cross-domain SSO Where as Client Management is where Anypoint Platform acts as a client provider by default, but you can also configure external client providers to authorize client applications. As an API owner, you can apply an OAuth 2.0 policy to authorize client applications that try to access your API. You need an OAuth 2.0 provider to use an OAuth 2.0 policy Reference:
https://docs.mulesoft.com/access-management/external-identity
NEW QUESTION # 145
What is an advantage of using OAuth 2.0 client credentials and access tokens over only API keys for API authentication?
- A. If the access token is compromised, I can be exchanged for an API key.
- B. If the client ID is compromised, it can be exchanged for an API key
- C. If the client secret is compromised, the client credentials do not have to be reissued.
- D. If the access token is compromised, the client credentials do not to be reissued.
Answer: D
Explanation:
The advantage of using OAuth 2.0 client credentials and access tokens over only API keys for API authentication is that if the access token is compromised, the client credentials do not have to be reissued.
OAuth 2.0 is a secure protocol for authenticating clients and authorizing them to access protected resources. It works by having the client authenticate with the authorization server and receive an access token, which is then used to authenticate requests to the API. If the access token is compromised, it can be revoked and replaced without needing to reissue the client credentials.
Reference:
Chapter 7: Security
Section 7.2: OAuth 2.0
NEW QUESTION # 146
A payment processing company has implemented a Payment Processing API Mule application to process credit card and debit card transactions, Because the Payment Processing API handles highly sensitive information, the payment processing company requires that data must be encrypted both In-transit and at-rest.
To meet these security requirements, consumers of the Payment Processing API must create request message payloads in a JSON format specified by the API, and the message payload values must be encrypted.
How can the Payment Processing API validate requests received from API consumers?
- A. The Mule application implementation can use the Validation module to decrypt and then validate the JSON data
- B. The Mule application implementation can use the APIkit module to decrypt and then validate the JSON data
- C. A Transport Layer Security (TLS) - Inbound policy can be applied in API Manager to decrypt the message payload and the Mule application implementation can then use the JSON Validation module to validate the JSON data
- D. The Mule application implementation can use DataWeave to decrypt the message payload and then use the JSON Scheme Validation module to validate the JSON data
Answer: C
NEW QUESTION # 147
A customer wants to use the mapped diagnostic context (MDC) and logging variables to enrich its logging and improve tracking by providing more context in the logs.
The customer also wants to improve the throughput and lower the latency of message processing.
As an Mulesoft integration architect can you advise, what should the customer implement to meet these requirements?
- A. Use synchronous logging at the INFO DEBUG or Trace level and use pattern layout with [%MDC] in the log4j2.xml configuration file and then configure the logging variables
- B. Useasync logger at the level equal to DEBUG orTRACEand use pattern
layout with [%MDC] in the log4j2.xml configuration file and then configure the logging variables - C. Useasync logger at the level greater than INFO and use pattern layout with [%MDC] in the log4j2,xml configuration file and then configure the logging variables
- D. Use synchronous logging and use pattern layout with [%MDC] in the log4j2.xml configuration file and then configure the logging variables
Answer: C
NEW QUESTION # 148
An organization has decided on a cloud migration strategy to minimize the organization's own IT resources. Currently the organization has all of its new applications running on its own premises and uses an on-premises load balancer that exposes all APIs under the base URL (https://api.rutujar.com).
As part of migration strategy, the organization is planning to migrate all of its new applications and load balancer CloudHub.
What is the most straightforward and cost-effective approach to Mule application deployment and load balancing that preserves the public URL's?
- A. For each migrated Mule application, deploy an API proxy application to Cloudhub with all traffic to the mule applications routed through a Cloud Hub Dedicated load balancer (DLB) Update a CNAME record for base URL ( https://api.rutujar.com) in the organization's DNS server to point to the A record of the CloudHub dedicated load balancer Apply mapping rules in DLB to map each API proxy application who is responding new application
- B. Deploy the Mule application to Cloudhub
Create a CNAME record for base URL( httpsr://api.rutujar.com) in the Cloudhub shared load balancer that points to the A record of theon-premises load balancer Apply mapping rules in SLB to map URLto their corresponding Mule applications - C. Deploy the Mule application to Cloudhub
Update a CNAME record for base URL ( https://api.rutujar.com) in the organization's DNS server to point to the A record of the CloudHub shared load balancer Apply mapping rules in SLB to map URLto their corresponding Mule applications - D. Deploy the Mule application to Cloudhub
Update a CNAME record for base URL ( https://api.rutujar.com) in the organization's DNS server to point to the A record of the Cloudhub dedicated load balancer Apply mapping rules in DLB to map URLto their corresponding Mule applications
Answer: D
NEW QUESTION # 149
A project uses Jenkins to implement CI/CD process. It was observed that each Mule package contains some of the Jenkins files and folders for configurations of CI/CD jobs.
As these files and folders are not part of the actual package, expectation is that these should not be part of deployed archive.
Which file can be used to exclude these files and folders from the deployed archive?
- A. mulelnclude
- B. _muleExclude
- C. muleignore
- D. _unTrackMule
Answer: B
NEW QUESTION # 150
A corporation has deployed multiple mule applications implementing various public and private API's to different cloudhub workers. These API's arc Critical applications that must be highly available and in line with the reliability SLA as defined by stakeholders.
How can API availability (liveliness or readiness) be monitored so that Ops team receives outage notifications?
- A. Configure alerts failure conditions in API manager
- B. Use any point functional monitoring test API's functional behavior
- C. Configure alerts with failure conditions in runtime manager
- D. Enable monitoring of individual applications from Anypoint monitoring
Answer: D
NEW QUESTION # 151
A stock broking company makes use of CloudHub VPC to deploy Mule applications. Mule application needs to connect to a database application in the customers on-premises corporate data center and also to a Kafka cluster running in AWS VPC.
How is access enabled for the API to connect to the database application and Kafka cluster securely?
- A. Setup VPC peering with AWS VPC and the customers devices corporate data center
- B. Set up a transit gateway to the customers on-premises corporate datacenter to AWS VPC
- C. Setup AnyPoint VPN to the customer's on-premise corporate data
center and VPC peering with AWS VPC - D. Setup VPC peering with the customers onto my service corporate data center and Anypoint VPN to AWS VPC
Answer: C
NEW QUESTION # 152
An organization is creating a set of new services that are critical for their business. The project team prefers using REST for all services but is willing to use SOAP with common WS-" standards if a particular service requires it.
What requirement would drive the team to use SOAP/WS-* for a particular service?
- A. Must publish and share the service specification (including data formats) with the consumers of the service
- B. Must support message acknowledgement and retry as part of the protocol
- C. Must use XML payloads for the service and ensure that it adheres to a specific schema
- D. Must secure the service, requiring all consumers to submit a valid SAML token
Answer: D
Explanation:
Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP).
SAML transactions use Extensible Markup Language (XML) for standardized communications between the identity provider and service providers.
SAML is the link between the authentication of a user's identity and the authorization to use a service.
WS-Security is the key extension that supports many authentication models including: basic username/password credentials, SAML, OAuth and more.
A common way that SOAP API's are authenticated is via SAML Single Sign On (SSO). SAML works by facilitating the exchange of authentication and authorization credentials across applications. However, there is no specification that describes how to add SAML to REST web services.
NEW QUESTION # 153
49 of A popular retailer is designing a public API for its numerous business partners. Each business partner will invoke the API at the URL 58. https://api.acme.com/partnefs/vl. The API implementation is estimated to require deployment to 5 CloudHub workers.
The retailer has obtained a public X.509 certificate for the name apl.acme.com, signed by a reputable CA, to be used as the server certificate.
Where and how should the X.509 certificate and Mule applications be used to configure load balancing among the 5 CloudHub workers, and what DNS entries should be configured in order for the retailer to support its numerous business partners?
- A. Add the X.509 certificate to a CloudHub Dedicated Load Balancer (DLB), not to the Mule application Create a CNAME for api.acme.com pointing to the DLB's A record
- B. Add the X.509 certificate to the Mule application's deployable archive, then configure a CloudHub Dedicated Load Balancer (DLB) for each of the Mule application's CloudHub workers Create a CNAME for api.acme.com pointing to the DLB's A record
- C. Add the X.509 certificate to the CloudHub Shared Load Balancer (SLB), not to the Mule application Create a CNAME for api.acme.com pointing to the SLB's A record
- D. Add the x.509 certificate to the Mule application's deployable archive, then configure the CloudHub Shared Load Balancer (SLB) for each of the Mule application's CloudHub workers
Answer: A
Explanation:
Create a CNAME for api.acme.com pointing to the SLB's A record
Explanation:
* An X.509 certificate is a vital safeguard against malicious network impersonators. Without x.509 server authentication, man-in-the-middle attacks can be initiated by malicious access points, compromised routers, etc.
* X.509 is most used for SSL/TLS connections to ensure that the client (e.g., a web browser) is not fooled by a malicious impersonator pretending to be a known, trustworthy website.
* Coming to the question , we can not use SLB here as SLB does not allow to define vanity domain names. * Hence we need to use DLB and add certificate in there
--------------------------------------------------------------------------------------------------------------------- Hence correct answer is Add the X 509 certificate to the cloudhub Dedicated Load Balancer (DLB), not the Mule application. Create the CNAME for api.acme.com pointing to the DLB's record
NEW QUESTION # 154
An organization uses a set of customer-hosted Mule runtimes that are managed using the Mulesoft-hosted control plane. What is a condition that can be alerted on from Anypoint Runtime Manager without any custom components or custom coding?
- A. When the Mute runtime license installed on a Mule runtime is about to expire
- B. When a Mule runtime's customer-hosted server is about to run out of disk space
- C. When a Mule runtime on a given customer-hosted server is experiencing high memory consumption during certain periods
- D. When an SSL certificate used by one of the deployed Mule applications is about to expire
Answer: C
Explanation:
Correct answer is When a Mule runtime on a given customer-hosted server is experiencing high memory consumption during certain periods Using Anypoint Monitoring, you can configure two different types of alerts: Basic alerts for servers and Mule apps Limit per organization: Up to 50 basic alerts for users who do not have a Titanium subscription to Anypoint Platform You can set up basic alerts to trigger email notifications when a metric you are measuring passes a specified threshold. You can create basic alerts for the following metrics for servers or Mule apps: For on-premises servers and CloudHub apps: * CPU utilization * Memory utilization * Thread count Advanced alerts for graphs in custom dashboards in Anypoint Monitoring. You must have a Titanium subscription to use this feature. Limit per organization: Up to 20 advanced alerts
NEW QUESTION # 155
An organization plans to extend its Mule APIs to the EU (Frankfurt) region.
Currently, all Mule applications are deployed to CloudHub 1.0 in the default North American region, from the North America control plane, following this naming convention: {API-name}-{environment} (for example, Orderssapi-dev, Orders-sapi--qa, Orders-sapi--prod, etc.).
There is no network restriction to block communications between APIs.
What strategy should be implemented in order to deploy the same Mule APIs to the CloudHub 1.0 EU region from the North America control plane, as well as to minimize latency between APIs and target users and systems in Europe?
- A. In Runtime Manager, for each Mule application deployment, set the Region property to EU (Frankfurt) and reuse the same Mule application mame as in the North American region.
Communicate the new urls {API-name}-{environment}.de-ci.cloudhub.io to the consuming API clients In Europe. - B. In Runtime Manager, for each Mule application deployment, leave the Region property blank (default) and change the Mule application name to {API-name}-{environment).de-cl.
Communicate the new urls {API-name}-{environment}.de-ci1.cloudhub.io to the consuming API clients in Europe. - C. In API Manager, set the Region property to EU (Frankfurt) to create an API proxy named {API-name}-proxy-{environment} for each Mule application.
Communicate the new url {API-name}-proxy-{environment}.de-c1.cloudhub.io to the consuming API clients In Europe. - D. In API Manager, leave the Region property blank (default) to deploy an API proxy named {API-name}~proxy~- (environment}.de-cl for each Mule application.
Communicate the new url {API-name}-proxy-{environment}.de-cl.cloudhub.io to the consuming API clients in Europe.
Answer: A
NEW QUESTION # 156
An API client makes an HTTP request to an API gateway with an Accept header containing the value'' application''.
What is a valid HTTP response payload for this request in the client requested data format?
- A. {"status" "healthy"}
- B. status: healthy
- C. <status>healthy</status>
- D. status('healthy")
Answer: A
NEW QUESTION # 157
......
MuleSoft-Integration-Architect-I Dumps 100 Pass Guarantee With Latest Demo: https://certlibrary.itpassleader.com/Salesforce/MuleSoft-Integration-Architect-I-dumps-pass-exam.html