[UPDATED 2023] Read MCD-Level-2 Study Guide Cover to Cover as Literally [Q30-Q49]

NEW QUESTION 30
A developer deploys an API to CloudHub and applies an OAuth policy on API Manager. During testing, the API response is slow, so the developer reconfigures the API so that the out-of-the-box HTTP Caching policy is applied first, and the OAuth API policy is applied second.
What will happen when an HTTP request is received?

In case of a cache hit, both the OAuth and HTTP Caching policies are evaluated; then the cached response is returned to the caller

In case of a cache it, only the HTTP Caching policy is evaluating; then the cached response is returned to the caller

In case of a cache miss, only the HTTP Caching policy is evaluated; then the API retrieves the data from the API implementation, and the policy stores the data to be cached in Object Store

In case of a cache miss, both the OAuth and HTTP Caching policies are evaluated; then the API retrieves the data from the API implementation, and the policy does not store the data in Object Store

NEW QUESTION 31
A developer is working on a project that requires encrypting all data before sending it to a backend application. To accomplish this, the developer will use PGP encryption in the Mule 4 Cryptography module.
What is required to encrypt the data before sending it to the backend application?

The application needs to configure HTTPS TLS context information to encrypt the data

The application needs to both the private and public keys to encrypt the data

The application needs the public key from the backend service to encrypt the data

The application needs the private key from the backend service to encrypt the data

NEW QUESTION 32
A scatter-gather router is configured with four routes:Route A, B, C and D.
Route C false.

Error,errorMesage.payload.results [‘2’]

Payload failures[‘2’]

Error,errorMessage,payload.failures[‘2’]

Payload [‘2’]

NEW QUESTION 33
An API has been developed and deployed to CloudHub Among the policies applied to this API is an allowlist of IP addresses. A developer wants to run a test in Anypoint Studio and does not want any policies applied because their workstation is not included in the allowlist.
What must the developer do in order to run this test locally without the policies applied?

Create a properties file specifically for local development and set the API instance ID to a value that is not used in API Manager

Pass in the runtime parameter ”-Danpow.platform.gatekeeper=disabled”

Deactivate the API in API Manager so the Autodiscovery element will not find the application when it runs in Studio

Run the test as-s, with no changes because the Studio runtime will not attempt to connect to API Manager

NEW QUESTION 34
The flow is invoicing a target API. The API’s protocol is HTTPS. The TLS configuration in the HTTP Request Configuration global element is set to None. A web client submits a request to
http:localhost:8081/vehicles.

If the certificate of the target API is signed by a certificate authority (CA), what is true about the HTTP Request operation when the flow executes?

The HTTP Request operation will succeed if the CA’S certificate is present in the JRE’s default keystore

The HTTP Request operation will succeed if the CA’s certificate is present in the JRE’s default truststore.

The HTTP Request operation will always succeed regardless of the CA

The HTTP Request operation will always fail regardless of the CA

NEW QUESTION 35
An API has been built to enable scheduling email provider. The front-end system does very little data entry validation, and problems have started to appear in the email that go to patients. A validate-customer” flow is added validate the data.
What is he expected behavior of the ‘validate-customer” flow?

If only the email address Is invalid a VALIDATION.INVALID_EMAIL error is raised

If the email address is invalid, processing continues to see if the appointment data and customer name are also invalid

If the appointment date and customer name are invalid, a
SCHEDULE:INVALID_APPOINTMENT_DATE error is raised

If all of the values are invalid the last validation error is
raised:SCHEDULE:INVALID_CUSTOMER_NAME

NEW QUESTION 36
Which properties are mandatory on the HTTP Connector configuration in order to use the OAuth 2.0 Authorization Code grant type for authentication?

External callback URL, access token URL, client ID response access token

Token URL, authorization URL, client ID, client secret local callback URL

External callback URL, access token URL, client ID, response refresh token

External callback URL, access token URL, local authorization URL, authorization URL, client ID, client secret

NEW QUESTION 37
A developer is working on a project that requires encrypting all data before sending it to a backend application. To accomplish this, the developer will use PGP encryption in the Mule 4 Cryptography module.
What is required to encrypt the data before sending it to the backend application?

The application needs to both the private and public keys to encrypt the data

The application needs to configure HTTPS TLS context information to encrypt the data

The application needs the private key from the backend service to encrypt the data

The application needs the public key from the backend service to encrypt the data

NEW QUESTION 38
Which plugin or dependency is required to unit test modules created with XML SDK?

XMLUnit

Junit

MUnit Extensions Maven plugin

MUnit Maven plugin

NEW QUESTION 39
An order processing system is composed of multiple Mule application responsible for warehouse, sales and shipping. Each application communication using Anypoint MQ. Each message must be correlated against the original order ID for observability and tracing.
How should a developer propagate the order ID as the correlation ID across each message?

Use the underlying HTTP request of Anypoint MQ to set the ‘X-CORRELATION_ID’ header to the order ID

Set a custom Anypoint MQ user property to propagate the order ID and set the correlation ID in the receiving applications.

Use the default correlation ID, Anypoint MQ will sutomatically propagate it.

Wrap all Anypoint MQ Publish operations within a With CorrelationID scope from the Tracing module, setting the correlation ID to the order ID

NEW QUESTION 40
A company deploys 10 public APIs to CloudHub. Each API has its individual health endpoint defined. The platform operation team wants to configure API Functional Monitoring to monitor the health of the APIs periodically while minimizing operational overhead and cost.
How should API Functional Monitoring be configured?

From one public location with each API in its own schedule

From one private location with all 10 APIs in a single schedule

From one public location with all 10 APIs in a single schedule

From 10 public locations with each API in its own schedule

NEW QUESTION 41
A heathcare customer wants to use hospital system data, which includes code that was developed using legacy tools and methods. The customer has created reusable Java libraries in order to read the data from the system.
What is the most effective way to develop an API retrieve the data from the hospital system?

Refer to JAR files in the code

Include the libraries writes deploying the code into the runtime

Create the Java code in your project and invoice the data from the code

Install libraries in a local repository and refer to it in the pm.xml file

NEW QUESTION 42
A Mule application for processing orders must log the order ID for every log message output.
What is a best practice to enrich every log message with the order ID?

Use flow variables within every logger processor to log the order ID

Set a flow variable and edit the log4/2.xml file to output the variable as part of the message pattern

Create a custom XML SDK component to wrap the logger processor and automatically add the order ID within the connector

Use the Tracing module to set logging variables with a Mapped Diagnostic Context

NEW QUESTION 43
When registering a client application with an existing API instance or API Group instance, what is required to manually approve or reject request access?

To configure the SLA tier for the application and have the role of Organization Administrator, API Manager Environment Administrator, or the Manage Contacts permission

To configure the SLA tier for the application and have the Exchange Administrator permission

To configure the SLA tier for the application

To only have Exchange Administrator permission

NEW QUESTION 44
Which type of cache invalidation does the Cache scope support without having to write any additional code?

Write-through invalidation

White-behind invalidation

Time to live

Notification-based invalidation

NEW QUESTION 45
A company has been using CI/CD. Its developers use Maven to handle build and deployment activities.
What is the correct sequence of activities that takes place during the Maven build and deployment?

Initialize, validate, compute, test, package, verify, install, deploy

Validate, initialize, compile, package, test, install, verify, verify, deploy

Validate, initialize, compile, test package, verify, install, deploy

Validation, initialize, compile, test, package, install verify, deploy

NEW QUESTION 46
The Center for Enablement team published a common application as a reusable module to the central Nexus repository.
How can the common application be included in all API implementations?

Download the common application from Naxus and copy it to the src/main/resources folder in the API

Copy the common application’s source XML file and out it in a new flow file in the src/main/mule folder

Add a Maven dependency in the PCM file with multiple-plugin as <classifier>

Add a Maven dependency in the POM file with jar as <classifier>

NEW QUESTION 47
Refer to the exhibit.
A Mute Object Store is configured with an entry TTL of one second and an expiration interval of 30 seconds.
What is the result of the flow if processing between os’store and os:retrieve takes 10 seconds?

nullPayload

originalPayload

OS:KEY_NOT_FOUND

testPayload

NEW QUESTION 48
Which statement is true about using mutual TLS to secure an application?

Mutual TLS requires a hardware security module to be used

Mutual TLS authenticates the identity of the server before the identity of the client

Mutual TLS ensures only authorized end users are allowed to access an endpoint

Mutual TLS increases the encryption strength versus server-side TLS alone

NEW QUESTION 49
Refer to the exhibit.
What action must be performed to log all the errors raised by the VM Connector?

Add <AsyncLOgger name=’orgroute.extensions vm’ level=ERROR’I> inside the Logger tag

Add <AsyncLOgger name=’orgroute.extensions vm’ level=ERROR’/> inside the Appenders tag

Configure <Logger level-‘ERROR’/> inside the VM Connector configuration

Nothing, as error-level events are automatically logged

Leave a Reply Cancel reply