Check the Free demo of our Apigee-API-Engineer Exam Dumps with 128 Questions [Q41-Q64]

Share

Check the Free demo of our Apigee-API-Engineer Exam Dumps with 128 Questions

Clear your concepts with Apigee-API-Engineer Questions Before Attempting Real exam


To pass the Google Apigee-API-Engineer exam, you will need to demonstrate your skills in areas such as API design, API security, API development, and API management. You will also need to have a good understanding of the Google Cloud platform and its various services, such as Cloud Storage, Cloud Functions, and Cloud Pub/Sub.

 

NEW QUESTION # 41
The backend API team has asked for metrics on the performance of an API. Which two pieces of data should you provide? Choose 2 answers

  • A. The Apigee proxy latency
  • B. The internet latency
  • C. The network latency
  • D. The backend latency
  • E. The backend database latency

Answer: D,E


NEW QUESTION # 42
Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
Choose 2 answers

  • A. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
  • B. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid
  • C. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
  • D. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
  • E. Verify the signature of the JWT using a shared secret.

Answer: A,B


NEW QUESTION # 43
Which are techniques for dynamically choosing the target endpoint at runtime?

  • A. use route rules with conditions
  • B. use routing tables defined for the proxy using the MGMT API
  • C. use javascript to set targeturl
  • D. nothing is needed, done by default

Answer: B


NEW QUESTION # 44
You are composing logs created from user input that contains confidential user information You need to record the presence of all fields, while ensuring that confidential information is not recorded in any log Which approach should you take?

  • A. Sanitize all data on entry using regular expressions that search for confidential data formats.
  • B. Use a data masking configuration to hide sensitive data from logs
  • C. Use conditions to skip logging for data that might contain confidential information.
  • D. Work with the administrators of the log aggregators to mask confidential data contents.

Answer: C


NEW QUESTION # 45
Where can you use a Flow Callout policy? Select all that apply.
Choose 2 answers

  • A. Only in the Flow phase of ProxyEndpoint or TargetEndpoint
  • B. Anywhere except another Shared Flow
  • C. In a Shared Flow
  • D. Anywhere in a ProxyEndpoint or TargetEndpoint except PostClientFlow
  • E. Only in ProxyEndpoint PreFlow or TargetEndpoint PostFlow

Answer: E


NEW QUESTION # 46
When retrieving a value from an encrypted KVM. the variable name to which it is assigned must be prefixed with which value to prevent it from being readable in tracing sessions?

  • A. kvm
  • B. private
  • C. hidden
  • D. encrypted
  • E. mask

Answer: A


NEW QUESTION # 47
Which components of Edge used to configure HTTPS inbound communication?

  • A. Certificate Manager
  • B. Virtual Hosts
  • C. TLS Store
  • D. Keystores and Truststores

Answer: D


NEW QUESTION # 48
Which is the recommended solution lo specify a different backend target for each environment?

  • A. TargetEndpoint configuration
  • B. TargetServer
  • C. RouteRules
  • D. Java/JavaScript/Python callout

Answer: B


NEW QUESTION # 49
In your last release, there were unexpected errors uncovered by users within the first 24 hours The root cause analysis found that key configurations were not promoted to production You want to avoid similar release failures in your next release What should you do?

  • A. Notify operations of the release
  • B. Ensure all sources are checked into source control
  • C. Run an automated smoke test suite.
  • D. Monitor the logs looking for unusual error patterns

Answer: D


NEW QUESTION # 50
You have a requirement to expose functions and data from an existing back-end system Using Apigee recommended practices, which step should you take first*?

  • A. Work with the existing or targeted application consumers to build an Open API Specification model
  • B. Catalog the data model of the backing data store or API into a data dictionary
  • C. Implement ad-hoc microservices using a managed container system.
  • D. Write business and functional requirements documents.

Answer: C


NEW QUESTION # 51
What does the variable "message.content" represent?

  • A. the response content in the response flow
  • B. the request content when in the request flow and the response content when in the response flow
  • C. the request content in the request flow
  • D. neither the request content nor the response content

Answer: B


NEW QUESTION # 52
The product owner has asked you for a new API. This new API will change a configuration for a backend system. The use case calls for a single API. Which verb should you use?

  • A. HEAD
  • B. GET
  • C. PUT
  • D. POST

Answer: B


NEW QUESTION # 53
You are implementing Concurrent Rate Limit, Spike Arrest and Quota policies in your proxy You want to make sure the simplest checks run first Using the flow shown in the diagram, which order of operations should you follow?

  • A. Quota > Concurrent Rate Limit > Spike Arrest
  • B. Spike Arrest > Quota > Concurrent Rate Limit
  • C. Quota > Spike Arrest > Concurrent Rate Limit
  • D. Concurrent Rate Limit > Spike Arrest > Quota

Answer: A


NEW QUESTION # 54
You are working on a project that adheres strictly to the Roy Fielding REST concepts. You need to update a single property named "status" of a complicated entity What should you do?

  • A. Create a new service that uses the PATCH verb designed to update only given fields. PATCH /api/trucks/42 HTTP/1.1 {status: 5}
  • B. Fetch the full entity, update the status value locally. DELETE the original entity and POST the new version.
  • C. Create a new service that uses the UPDATE verb that accepts the "status* property and updates the entity UPDATE /api/trucks/42/status HTTP/1.1 {status: 5}
  • D. Fetch the full entity. Change only the status value and then send the whole object in the request body of the PUT service

Answer: B


NEW QUESTION # 55
You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?

  • A. Stored in encrypted Key-Value Maps and access at run time.
  • B. Stored in Key-Value Maps and accessed at run time.
  • C. Stored in configuration files and make use at run time.
  • D. Hardcoded in Assign Message policy

Answer: A


NEW QUESTION # 56
When is it appropriate to use query parameters in RESTful API design? Select all that are correct

  • A. When filtering the response based upon a query
  • B. When requesting that an entire collection be deleted.
  • C. When providing the ability to return different levels of detail in the response.
  • D. When passing username and passwords.

Answer: A,C


NEW QUESTION # 57
How can we specrfy the type of Security (basic auth, oauth) used by the API in OpenAPI Specification 2.0?

  • A. specify using the security Variables name properly
  • B. specify using the securityParams name property
  • C. specify using the secuntySchemas name property
  • D. specify using the secuntyDefinrtions name property

Answer: D


NEW QUESTION # 58
Which policy can be used to see if a SOAP request matches a provided WSDL?

  • A. XMLThreatProtection
  • B. AccessControl
  • C. XMLValidation
  • D. MessageValidation

Answer: A


NEW QUESTION # 59
As an API Engineer you are approached late in the day with an emergency request to configure a 2 way TLS connection between Apigee and the backend server. All existing certificates have been revoked. The security team provides you the PEM file for the backend server and your new Apigee TLS certificate. What minimum steps are required to reconfigure 2-way TLS?
Choose 2 answers

  • A. Add the backend servers PEM file to the trust store.
  • B. Add your Apigee TLS certificate to the key store.
  • C. Add the backend certificate chain to the trust store
  • D. Add the backend servers PEM file to the key store.
  • E. Use the KVM to store the contents of the PEM file.
  • F. Use the Access Control Policy to reference the PEM file

Answer: D,E


NEW QUESTION # 60
A customer has added response cache policy on all their search APIs, but traffic to the backend has not reduced much. They ask you to investigate, you find that GET queries are being cached and available in memory but cache misses are still high You want to improve caching and reduce cache misses What should you do?

  • A. Use lookup/populate cache policy.
  • B. Review and increase the number of items on the cache resource to a higher number
  • C. Increase the TimeToLive of cached objects
  • D. Review key fragments in cache key, ensuring only important parameters are used

Answer: C


NEW QUESTION # 61
The backend API team has asked for metrics on the performance of an API. Which two pieces of data should you provide?

  • A. The Apigee proxy latency
  • B. The internet latency
  • C. The network latency
  • D. The backend latency
  • E. The backend database latency

Answer: D,E


NEW QUESTION # 62
Which are characteristics of the PopulateCache and ResponseCache policies'?

  • A. PopulateCache allows you to cache any string object.
  • B. ResponseCache has separate policy definitions for Lookup vs. Populate cache operations.
  • C. ResponseCache caches the complete HTTP response (including headers).
  • D. PopulateCache has a TimeOfYear expiry option

Answer: B


NEW QUESTION # 63
Which is true about DefaultFaultRule"?

  • A. DefaultFaultRules are a fixed set of fault rules defined in the product
  • B. DefaultFaultRule can be used lo handle an error that is not explicitly handled by a FaultRule.
  • C. You cannot use both FaultRule and DefaultFaultRules in the same API proxy
  • D. DefaultFaultRule is used when the fault happens during communication with the target

Answer: A


NEW QUESTION # 64
......

Get professional help from our Apigee-API-Engineer Dumps PDF: https://dumpstorrent.dumpsking.com/Apigee-API-Engineer-testking-dumps.html