Apigee-API-Engineer Dumps with Practice Exam Questions Answers
Apigee-API-Engineer by Apigee Certification Program Actual Free Exam Practice Test
NEW QUESTION # 24
What is the order in which RouteRules are evaluated when many are present?
- A. bottom to top as configured in the ProxyEndpoint
- B. top to bottom as configured in the ProxyEndpoint
- C. alphabetical by name
- D. no order, random
- E. bottom to top as configured in the TargetEndpoint
Answer: B
NEW QUESTION # 25
Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
Choose 2 answers
- A. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
- B. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
- C. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
- D. Verify the signature of the JWT using a shared secret.
- E. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
Answer: B,E
NEW QUESTION # 26
Your project is growing, and there have been several instances of confusion about the naming of data fields.
What should you do?
- A. Ask developers to do more code reviews, and focus on the names of fields.
- B. Create a unified data model that attempts to model all use cases for each object type
- C. Enforce a naming convention using a static code analysis tool.
- D. Create a basic data dictionary that covers common use cases and rules for naming
Answer: D
NEW QUESTION # 27
You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?
- A. Hardcoded in Assign Message policy
- B. Stored in Key-Value Maps and accessed at run time.
- C. Stored in encrypted Key-Value Maps and access at run time.
- D. Stored in configuration files and make use at run time.
Answer: C
NEW QUESTION # 28
You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?
- A. Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token
- B. Use an OAuth2 scope to identify allowed applications and user granted rights
- C. Implement user rights checks in the underlying microservice
- D. Create a different URL for updates
Answer: B
NEW QUESTION # 29
Your project is growing, and there have been several instances of confusion about the naming of data fields. What should you do?
- A. Ask developers to do more code reviews, and focus on the names of fields.
- B. Create a unified data model that attempts to model all use cases for each object type
- C. Enforce a naming convention using a static code analysis tool.
- D. Create a basic data dictionary that covers common use cases and rules for naming
Answer: D
NEW QUESTION # 30
How can we specrfy the type of Security (basic auth, oauth) used by the API in OpenAPI Specification 2.0?
- A. specify using the secuntyDefinrtions name property
- B. specify using the security Variables name properly
- C. specify using the securityParams name property
- D. specify using the secuntySchemas name property
Answer: A
NEW QUESTION # 31
You are implementing Concurrent Rate Limit, Spike Arrest and Quota policies in your proxy You want to make sure the simplest checks run first Using the flow shown in the diagram, which order of operations should you follow?
- A. Quota > Spike Arrest > Concurrent Rate Limit
- B. Spike Arrest > Quota > Concurrent Rate Limit
- C. Quota > Concurrent Rate Limit > Spike Arrest
- D. Concurrent Rate Limit > Spike Arrest > Quota
Answer: C
NEW QUESTION # 32
You need to interact with two different back end systems, depending on inbound request data One backend is a default target URL without SSL and another one is a dynamic target URL with 2-Way SSL What should you do?
- A. Create another target endpoint with SSL configured and define route rule to pick that depends on available variables.
- B. Use an AssignMessage policy to override default target URL and define 2-way SSL configuration at runtime
- C. Use service callouts configuration for each target, and use a condition to decide which to invoke.
- D. Use a Key-Value Map configuration to access SSL and URL information to invoke target systems
Answer: A
NEW QUESTION # 33
You are implementing several flows in Apigee Edge and realize that there is common functionality used across many different APIs and flows You want to use Apigee Edge to minimize the number of releases What should you do?
- A. Use a template build process to compose flows from flow fragments.
- B. Use Proxy Chaining and a Service Callout where needed
- C. Use a Shared Flow and a Flow Callout where needed.
- D. Use a Shared Flow and Flow Hooks to enforce all APIs call the shared flow
Answer: C
NEW QUESTION # 34
Which are NOT a step in the OAuth 2 0 authorization code grant process?
- A. validate the client API key
- B. obtain the end user's consent for the application to request the user's protected resources
- C. validate the developer name
- D. generate an access token
- E. generate an authorization code
- F. verify the device ID
Answer: B,C,E
NEW QUESTION # 35
Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
- A. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
- B. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
- C. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
- D. Verify the signature of the JWT using a shared secret.
- E. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
Answer: B,E
NEW QUESTION # 36
Which protocols are supported by the Message Logging policy?
- A. SCP
- B. FTP
- C. HTTP
- D. TCP
- E. UDP
Answer: C,D
NEW QUESTION # 37
You are composing logs created from user input that contains confidential user information You need to record the presence of all fields, while ensuring that confidential information is not recorded in any log Which approach should you take?
- A. Sanitize all data on entry using regular expressions that search for confidential data formats.
- B. Use a data masking configuration to hide sensitive data from logs
- C. Use conditions to skip logging for data that might contain confidential information.
- D. Work with the administrators of the log aggregators to mask confidential data contents.
Answer: C
NEW QUESTION # 38
When a quota is configured with the distributed flag set to false, the number of which of the following would affect the overall allowed traffic?
- A. Management Servers
- B. Routers
- C. Message Processors
- D. Cassandra nodes
Answer: D
NEW QUESTION # 39
As an API Engineer you have been asked to automate the build process for Apigee deployments. You decide to build a new tool to deploy the API Bundles using the Apigee Management API. What would be the correct approach?
- A. Each management API you plan to use should be turned into an Apigee Proxy.
- B. Management APIs should be called directly from the tool to the Apigee gateway
- C. You should deploy an Apigee microgateway
- D. Management APIs need a separate API product for security reasons.
Answer: B
NEW QUESTION # 40
......
Free Apigee Certification Program Apigee-API-Engineer Exam Question: https://questionsfree.prep4pass.com/Apigee-API-Engineer_exam-braindumps.html
