[Aug-2021] Dumps Brief Outline Of The Apigee-API-Engineer Exam - PrepAwayExam
Apigee-API-Engineer Training & Certification Get Latest Apigee Certification Program
NEW QUESTION 18
A cloud customer wants to safeguard their APIs against a sudden increase in traffic. You need to calculate an allowable traffic rate of 100 transactions per second (TPS) What should you do?
- A. Use a Quota enforcement policy set to limit throughput to 100 TPS
- B. Use a default Spike Arrest policy setting the limit to 100 TPS
- C. Use a Spike Arrest policy setting the UseEffectiveCount parameter
- D. Keep a count of accesses in the back-end, rejecting queries when they exceed 100 TPS
Answer: B
NEW QUESTION 19
What capabilities are provided when using the apigee-access node js module? Select all that apply
- A. Edge flow variable access
- B. Analytics Storage
- C. Object caching
- D. XML and JSON conversions
Answer: A,C
NEW QUESTION 20
You have a single back end that needs to be exposed to customers using different API request and response payloads You need to allow these different request types without breaking existing implementations What should you do?
- A. Configure the API as a pass-through proxy and invoke backend target system with client request parameters.
- B. Create a new proxy xml and base path with upgraded version and invoke backend target system with required parameters
- C. Create a new API proxy for new customers and invoke backend target system with required parameters.
- D. Include a new customer requirement in an existing API proxy and invoke backend target system with required parameters.
Answer: B
NEW QUESTION 21
Your project has just started, and you are observing that bugs are being caught in QA on features that were previously working You want to provide a self-governing mechanism for the team to identify regression bugs What should you do?
- A. Use Behavior Driven Development tools.
- B. Use static code analysis tools.
- C. Ask developers to run unit tests prior to each check in
- D. Implement automated integration testing on check in.
Answer: B
NEW QUESTION 22
Which plugins are not enabled as part of the default Edge Microgateway installation?
- A. oauth
- B. quota
- C. analytics
- D. spike arrest
Answer: B,D
NEW QUESTION 23
You are working on a project that adheres strictly to the Roy Fielding REST concepts. You need to update a single property named "status" of a complicated entity What should you do?
- A. Create a new service that uses the UPDATE verb that accepts the "status* property and updates the entity UPDATE /api/trucks/42/status HTTP/1.1 {status: 5}
- B. Fetch the full entity, update the status value locally. DELETE the original entity and POST the new version.
- C. Create a new service that uses the PATCH verb designed to update only given fields. PATCH
/api/trucks/42 HTTP/1.1 {status: 5} - D. Fetch the full entity. Change only the status value and then send the whole object in the request body of the PUT service
Answer: B
NEW QUESTION 24
You have implemented an Apigee Edge API proxy that includes a new shared flow Before you release to production, you need to ensure all dependencies are readied What should you do?
- A. Run automated unit tests in the test environment
- B. Alert the quality analysis team and product owner that you are preparing the release
- C. Deploy the shared flow to the production environment
- D. Execute static code analysis on the bundle
Answer: B
NEW QUESTION 25
Which of the following statements are true for the out-of-the-box Apigee Edge Analytics Dashboard? Select all that apply Choose 3 answers
- A. Visualize API proxy error metrics
- B. Visualize Developer Engagement metrics
- C. Visualize API Deployment metrics
- D. Visualize Management API traffic metrics
- E. Visualize API traffic metrics
Answer: A,C,D
NEW QUESTION 26
You are working on a new design for an API. The backend API will set the customer to a deleted status. The customer will remain in the backend database for later cleanup. The customer can no longer be retrieved by the API once the status is set. Which method should be used at the Apigee proxy to set the deleted status?
- A. GET
- B. DELETE
- C. OPTIONS
- D. POST
- E. PUT
Answer: A
NEW QUESTION 27
Which policy can be used to restrict access to API resources based on the client IP?
- A. Regular Expression Protection policy
- B. Raise Fault policy
- C. Access Control policy
- D. Basic Authentication policy
Answer: B
NEW QUESTION 28
Which describe the ResponseCache' policy in Apigee Edge? Select all that are correct
- A. Helps to reduce the amount of load to the target system.
- B. Caches both the request and the response
- C. Should be attached to both Request and Response Flow
- D. Helps to reduce the response latency
Answer: B,C
NEW QUESTION 29
Which are characteristics of the PopulateCache and ResponseCache policies'?
- A. ResponseCache has separate policy definitions for Lookup vs. Populate cache operations.
- B. PopulateCache allows you to cache any string object.
- C. PopulateCache has a TimeOfYear expiry option
- D. ResponseCache caches the complete HTTP response (including headers).
Answer: A
NEW QUESTION 30
As an API Engineer you have been asked to automate the build process for Apigee deployments. You decide to build a new tool to deploy the API Bundles using the Apigee Management API. What would be the correct approach?
- A. Each management API you plan to use should be turned into an Apigee Proxy.
- B. Management APIs should be called directly from the tool to the Apigee gateway
- C. Management APIs need a separate API product for security reasons.
- D. You should deploy an Apigee microgateway
Answer: B
NEW QUESTION 31
You are using the Apigee ExtractVariables policy JSONPath feature, and discover that the query is not returning the expected result for the payload you are providing What should you do?
- A. Check that the Accept header is set to application/json.
- B. Check that the Accept header is set to text/json
- C. Check that the Content-Type header is set to application/json
- D. Check that the Content-Type header is set to text/json
Answer: A
NEW QUESTION 32
Your company runs their internal services across two datacenters in a hot-warm configuration The back-end system for a new API runs in both data centers You want to implement a proxy that handles failover between these data centers What should you do?
- A. Use the not datacenter as the TargetEndpoint and configure a FaultRule to call the warm datacenter in case of failure
- B. Create Target Servers for each datacenter and configuring the TargetEndpoint with a LoadBalancer, setting the Is Fallback property on the warm datacenter
- C. Create two service callouts to the target, calling the hot datacenter first and the warm datacenter in the event of failure on the first call
- D. Use a Java Callout to the target, calling the hot datacenter first and the warm datacenter in case of failure
Answer: C
NEW QUESTION 33
Which features are supported in the OAulhV2 policy'?
- A. credentials validation when password grantjype is used
- B. setting different expiration for refresh and access tokens
- C. setting custom attributes for generated access tokens
- D. storing external access tokens
Answer: B,D
NEW QUESTION 34
As an API Engineer your team has had issues with security vulnerabilities and poor coding practices in the past. You would like to improve your team's reputation within the organization. What step could take to improve your process?
- A. Add code quality analysis into your CI/CD process.
- B. Ask the developers to run unit tests prior to code check-in.
- C. Add smoke tests to your CI/CD process
- D. Ask the developers to run anti-virus against the code prior to check in.
Answer: D
NEW QUESTION 35
Your API generates tokens to authenticate users. You have the following requirements
1. Limited token lifetime.
2. Managed key rotation.
3. Self-verifiable content.
4 Compact data representation
5. Refresh without new challenge.
You plan to use SAML2 Which two of the above-listed requirements are satisfied by using SAML2? Choose 2 answers
- A. Compact data representation
- B. Refresh without a new challenge
- C. Self-verifiable content
- D. Limited token lifetime.
- E. Managed key rotation
Answer: B,D
NEW QUESTION 36
Which will allow me to set the number of maximum elements to be cached in memory in a particular cache resource?
- A. Specify in PopulateCache policy
- B. Specify max size in KB in Cache Resource definition
- C. Specify number of Max Elements In Memory on the Cache Resource definition
- D. It cannot be configured as Apigee manages it internally.
Answer: A
NEW QUESTION 37
You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?
- A. Stored in configuration files and make use at run time.
- B. Hardcoded in Assign Message policy
- C. Stored in Key-Value Maps and accessed at run time.
- D. Stored in encrypted Key-Value Maps and access at run time.
Answer: D
NEW QUESTION 38
Where can you use a Flow Callout policy? Select all that apply.
- A. In a Shared Flow
- B. Only in ProxyEndpoint PreFlow or TargetEndpoint PostFlow
- C. Only in the Flow phase of ProxyEndpoint or TargetEndpoint
- D. Anywhere in a ProxyEndpoint or TargetEndpoint except PostClientFlow
- E. Anywhere except another Shared Flow
Answer: B
NEW QUESTION 39
Which approaches can be used for extracting data from a SOAP body and returning it as a JSON response in Apigee Edge?
Choose 3 answers
- A. Use XSLT to transform the XML payload and then use a XML to JSON policy
- B. Use XML to JSON policy first to convert to JSON and then ExtractVariables with a JSONPath to extract the body from the converted SOAP envelope
- C. Use ExtractVariables with an XPath first to extract the SOAP body and then use XML to JSON policy
- D. Use an AssignMessage policy to convert the SOAP response to a JSON response, using XPath expressions to retrieve the data
Answer: D
NEW QUESTION 40
You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?
- A. Use an OAuth2 scope to identify allowed applications and user granted rights
- B. Implement user rights checks in the underlying microservice
- C. Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token
- D. Create a different URL for updates
Answer: B
NEW QUESTION 41
Your project is growing, and there have been several instances of confusion about the naming of data fields.
What should you do?
- A. Enforce a naming convention using a static code analysis tool.
- B. Create a unified data model that attempts to model all use cases for each object type
- C. Ask developers to do more code reviews, and focus on the names of fields.
- D. Create a basic data dictionary that covers common use cases and rules for naming
Answer: D
NEW QUESTION 42
Which components of Edge used to configure HTTPS inbound communication?
- A. TLS Store
- B. Virtual Hosts
- C. Certificate Manager
- D. Keystores and Truststores
Answer: D
NEW QUESTION 43
......
Certification Training for Apigee-API-Engineer Exam Dumps Test Engine: https://www.prepawayexam.com/Google/braindumps.Apigee-API-Engineer.ete.file.html
Apigee Certification Program Apigee-API-Engineer Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1NpBj5XXNqHFmx3YV2_1gzD4Iei_l24if