When a client and server are exchanging messages during the mTLS handshake, what is being agreed on during the cipher suite exchange?
A.
A protocol
B.
The TLS version
C.
An encryption algorithm
D.
The Public key format
An encryption algorithm
Explanation
A cipher suite is a set of cryptographic algorithms that are used to secure the communication between a client and a server. A cipher suite consists of four components: a key exchange algorithm, an authentication algorithm, an encryption algorithm, and a message authentication code (MAC) algorithm. During the cipher suite exchange, the client and the server agree on which encryption algorithm to use for encrypting and decrypting the data.
References: https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#cipher-suites
A company has been using CI/CD. Its developers use Maven to handle build and deployment activities.
What is the correct sequence of activities that takes place during the Maven build and deployment?
A.
Initialize, validate, compute, test, package, verify, install, deploy
B.
Validate, initialize, compile, package, test, install, verify, verify, deploy
C.
Validate, initialize, compile, test package, verify, install, deploy
D.
Validation, initialize, compile, test, package, install verify, deploy
Validate, initialize, compile, test package, verify, install, deploy
Explanation
The correct sequence of activities that takes place during the Maven build and deployment is validate, initialize, compile, test package, verify, install, deploy. These are Maven lifecycle phases that define a sequence of goals to execute during a build process. Each phase represents a stage in the build lifecycle and can have zero or more goals bound to it.
References:
https://maven.apache.org/guides/introduction/introduction-to-the-lifecycle.html
A company deploys 10 public APIs to CloudHub. Each API has its individual health endpoint defined. The platform operation team wants to configure API Functional Monitoring to monitor the health of the APIs periodically while minimizing operational overhead and cost.
How should API Functional Monitoring be configured?
A.
From one public location with each API in its own schedule
B.
From one private location with all 10 APIs in a single schedule
C.
From one public location with all 10 APIs in a single schedule
D.
From 10 public locations with each API in its own schedule
From one public location with all 10 APIs in a single schedule
Explanation:
To configure API Functional Monitoring to monitor the health of 10 public APIs periodically while minimizing operational overhead and cost, the developer should use one public location with all 10 APIs in a single schedule. A public location is a worker that runs in a CloudHub shared environment, which is cheaper and easier to maintain than a private location. A single schedule allows running all 10 APIs tests at the same time and frequency, which reduces complexity and resource consumption.
References:
https://docs.mulesoft.com/functional-monitoring/fm-create-monitor#create-a-monitor
An order processing system is composed of multiple Mule application responsible for warehouse, sales and shipping. Each application communication using Anypoint MQ. Each message must be correlated against the original order ID for observability and tracing. How should a developer propagate the order ID as the correlation ID across each message?
A.
Use the underlying HTTP request of Anypoint MQ to set the ‘X-CORRELATION_ID’ header to the order ID
B.
Set a custom Anypoint MQ user property to propagate the order ID and set the correlation ID in the receiving applications
C.
Use the default correlation ID, Anypoint MQ will sutomatically propagate it.
D.
Wrap all Anypoint MQ Publish operations within a With CorrelationID scope from the Tracing module, setting the correlation ID to the order ID
Wrap all Anypoint MQ Publish operations within a With CorrelationID scope from the Tracing module, setting the correlation ID to the order ID
Explanation:
To propagate the order ID as the correlation ID across each message using Anypoint MQ, the developer should wrap all Anypoint MQ Publish operations within a With CorrelationID scope from the Tracing module, setting the correlation ID to the order ID. The With CorrelationID scope allows setting a custom correlation ID for any event that occurs within it. The Tracing module also enables distributed tracing across different Mule applications and services using Anypoint Monitoring.
References:
https://docs.mulesoft.com/tracing-module/1.0/tracing-module-reference#with-correlation-id-scope
https://docs.mulesoft.com/tracing-module/1.0/tracing-module-concepts
Which statement is true when using XML SDK for creating custom message processors?
A.
Properties are fields defined by an end user of the XML SDK component and serve as a global configuration for the entire Mule project in which they are used
B.
An XML SDK provides both inbound and outbound operations
C.
Operations can be reused in recursive calls
D.
All operations are public
All operations are public
Explanation:
When using XML SDK for creating custom message processors, all operations are public by default and can be used by any Mule application that imports them. There is no way to make an operation private or protected in XML SDK.
References: https://docs.mulesoft.com/mule-sdk/1.1/xml-sdk#operations
Which plugin or dependency is required to unit test modules created with XML SDK?
A.
XMLUnit
B.
Junit
C.
MUnit Extensions Maven plugin
D.
MUnit Maven plugin
MUnit Extensions Maven plugin
Explanation:
To unit test modules created with XML SDK, the developer needs to use the MUnit Extensions Maven plugin. This plugin allows testing XML SDK modules using MUnit by adding a dependency to the module under test and using a custom processor tag to invoke it.
References:
https://docs.mulesoft.com/mule-sdk/1.1/xml-sdk#testing
A Mule application uses API autodiscovery to access and enforce policies for a RESTful implementation.
A.
Northing because flowRef is an optional attribute which can be passed runtime
B.
The name of the flow that has APlkit Console to receive all incoming RESTful operation requests.
C.
Any of the APIkit generate implement flows
D.
The name of the flow that has HTTP listener to receive all incoming RESTful operation requests
The name of the flow that has HTTP listener to receive all incoming RESTful operation requests
Explanation:
To use API autodiscovery to access and enforce policies for a RESTful implementation, flowRef must be set to the name of the flow that has HTTP listener to receive all incoming RESTful operation requests. This way, API autodiscovery can identify the API implementation and associate it with the corresponding API specification and policies in API Manager. The flow that has HTTP listener is usually the main flow that contains the APIKit Router.
References:
https://docs.mulesoft.com/api-manager/2.x/api-auto-discovery-new-concept#flowref
Which statement is true about using mutual TLS to secure an application?
A.
Mutual TLS requires a hardware security module to be used
B.
Mutual TLS authenticates the identity of the server before the identity of the client
C.
Mutual TLS ensures only authorized end users are allowed to access an endpoint
D.
Mutual TLS increases the encryption strength versus server-side TLS alone
Mutual TLS authenticates the identity of the server before the identity of the client
Explanation
Mutual TLS (mTLS) is an extension of TLS that requires both parties (client and server) to present their certificates to each other during the handshake process. This way, both parties can verify each other’s identity and establish a secure connection. The authentication of the server happens before the authentication of the client, as the server sends its certificate first and then requests the client’s certificate.
References:
https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#mutual-authentication
Page 1 out of 6 Pages |