Online Access Free MCPA-Level-1-Maintenance Exam Questions

An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.
The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.
What out-of-the-box Anypoint Platform policy can address exposure to this threat?

• A.Shut out bad actors by using HTTPS mutual authentication for all API invocations
• B.Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors
• C.Apply a JSON threat protection policy to all APIs to detect potential threat vectors
• D.Apply a Header injection and removal policy that detects the malicious data before it is used

What is a typical result of using a fine-grained rather than a coarse-grained API deployment model to implement a given business process?

• A.A decrease in the number of connections within the application network supporting the business process
• B.A higher number of discoverable API-related assets in the application network
• C.A better response time for the end user as a result of the APIs being smaller in scope and complexity
• D.An overall tower usage of resources because each fine-grained API consumes less resources

Question 10: Skipped
An API implementation returns three X-RateLimit-* HTTP response headers to a requesting API client. What type of information do these response headers indicate to the API client?

• A.The remaining capacity allowed by the API implementation
• B.A correlation ID that should be sent in the next request
• C.The error codes that result from throttling
• D.The HTTP response size

Traffic is routed through an API proxy to an API implementation. The API proxy is managed by API Manager and the API implementation is deployed to a CloudHub VPC using Runtime Manager. API policies have been applied to this API. In this deployment scenario, at what point are the API policies enforced on incoming API client requests?

• A.At both the API proxy and the API implementation
• B.At the API implementation
• C.At the API proxy
• D.At a MuleSoft-hosted load balancer

The responses to some HTTP requests can be cached depending on the HTTP verb used in the request.
According to the HTTP specification, for what HTTP verbs is this safe to do?

• A.PUT, POST, DELETE
• B.GET, PUT, OPTIONS
• C.GET, HEAD, POST
• D.GET, OPTIONS, HEAD