Salesforce Certified MuleSoft Platform Architect Sample Questions:

1. Select the correct Owner-Layer combinations from below options

A) 1. App Developers owns and focuses on Experience Layer APIs
2. Central IT owns and focuses on Process Layer APIs
3. LOB IT owns and focuses on System Layer APIs
B) 1. App Developers owns and focuses on Experience Layer APIs
2. LOB IT owns and focuses on Process Layer APIs
3. Central IT owns and focuses on System Layer APIs
C) 1. Central IT owns and focuses on Experience Layer APIs
2. LOB IT owns and focuses on Process Layer APIs
3. App Developers owns and focuses on System Layer APIs

2. Mule applications that implement a number of REST APIs are deployed to their own subnet that is inaccessible from outside the organization.
External business-partners need to access these APIs, which are only allowed to be invoked from a separate subnet dedicated to partners - called Partner-subnet. This subnet is accessible from the public internet, which allows these external partners to reach it.
Anypoint Platform and Mule runtimes are already deployed in Partner-subnet. These Mule runtimes can already access the APIs.
What is the most resource-efficient solution to comply with these requirements, while having the least impact on other applications that are currently using the APIs?

A) Implement (or generate) an API proxy Mule application for each of the APIs, then deploy the API proxies to the Mule runtimes
B) Duplicate the APIs as Mule applications, then deploy them to the Mule runtimes
C) Add an additional endpoint to each API for partner-enablement consumption
D) Redeploy the API implementations to the same servers running the Mule runtimes

3. A team is planning to enhance an Experience API specification, and they are following API-led connectivity design principles.
What is their motivation for enhancing the API?

A) An IP Allowlist policy is being added to the API instances in the Development and Staging environments
B) A Canonical Data Model is being adopted that impacts several types of data included in the API
C) The primary API consumer wants certain kinds of endpoints changed from the Center for Enablement standard to the consumer system standard
D) The underlying System API is updated to provide more detailed data for several heavily used resources

4. An organization has created an API-led architecture that uses various API layers to integrate mobile clients with a backend system. The backend system consists of a number of specialized components and can be accessed via a REST API. The process and experience APIs share the same bounded-context model that is different from the backend data model. What additional canonical models, bounded-context models, or anti-corruption layers are best added to this architecture to help process data consumed from the backend system?

A) Create an anti-corruption layer for every API to perform transformation for every data model to match each other, and let data simply travel between APIs to avoid the complexity and overhead of building canonical models
B) Create a canonical model that combines the backend and API-led models to simplify and unify data models, and minimize data transformations.
C) Create a bounded-context model for every layer and overlap them when the boundary contexts overlap, letting API developers know about the differences between upstream and downstream data models
D) Create a bounded-context model for the system layer to closely match the backend data model, and add an anti-corruption layer to let the different bounded contexts cooperate across the system and process layers

5. 4 Production environment is running on a dedicated Virtual Private Cloud (VPC) on CloudHub 1,0, and the security team guidelines clearly state no traffic on HTTP.
Which two options support these security guidelines?
Choose 2 answers

A) Configure the IP Blocklist policy to control access to a configured API endpoint from either a single IP address or a range of IP addresses.
B) Add the entry in the VPC firewall rule.

C) Remove the entry from the VPC firewall rule

D) Create a custom policy to apply to outgoing and incoming HTTP requests to control access to a configured API endpoint
E) Configure the HTTPS protocol in HTTP listener in the Mule application

Solutions: