Apigee-API-Engineer by Google Actual Free Exam Q&As

Question 1

Which is a use of OAuth 2 0 scopes'?

A. implement SAML security assertions B. issue OAuth 2 0 refresh tokens C. select API products for the request D. govern the level of access for client applications

Discussion 0

Correct Answer: B Vote an answer

Question 2

Your API generates tokens to authenticate users. You have the following requirements
1. Limited token lifetime.
2. Managed key rotation.
3. Self-verifiable content.
4 Compact data representation
5. Refresh without new challenge.
You plan to use SAML2 Which two of the above-listed requirements are satisfied by using SAML2? Choose 2 answers

A. Refresh without a new challenge B. Compact data representation C. Self-verifiable content D. Managed key rotation E. Limited token lifetime.

Discussion 0

Correct Answer: E Vote an answer

Question 3

You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?

A. Stored in Key-Value Maps and accessed at run time. B. Hardcoded in Assign Message policy C. Stored in configuration files and make use at run time. D. Stored in encrypted Key-Value Maps and access at run time.

Discussion 0

Correct Answer: D Vote an answer

Question 4

How can we specrfy the type of Security (basic auth, oauth) used by the API in OpenAPI Specification 2.0?

A. specify using the security Variables name properly B. specify using the secuntyDefinrtions name property C. specify using the securityParams name property D. specify using the secuntySchemas name property

Discussion 0

Correct Answer: B Vote an answer

Question 5

Where does a ScriptTarget node.js application run when deployed to Edge?

A. Within Apigee's node.js runtime called Trireme B. Inside a Vert x runtime engine C. In a Docker container D. Google's V8 JavaScript engine

Discussion 0

Correct Answer: A Vote an answer

Question 6

What are the HTTPTargetConneclion properties to control network timeouts?

A. response millis and connect.millis B. target.timeout and proxy timeout C. connect.timeout.millis and io.timeoutmillis D. connect timeout and network timeout

Discussion 0

Correct Answer: C Vote an answer

Question 7

You have a new set of requirements for a mobile app. The product team tells you that the user data already exists from the website version of the app. The user APIs are currently internal access only. The product team has asked for the following.
* The app requires user authentication before data should be accessed.
* The app needs to display user data once the user has logged into the mobile app.
* The app needs to allow changes to user data once the user has logged into the mobile app.
Choose three development tasks that would accomplish the requirements. Choose 3 answers

A. Create a new API proxy for a DELETE/v1/customers/{customerid} B. Create an Oauth 2.0 Client Credential Flow Grant Type API proxy C. Create a new API proxy for a GET /v1/customers/{customerid} D. Create a new API proxy for a PUT/v1/customers/{customerid} E. Create an Oauth 2 0 Service Account API proxy F. Create an Oauth 2.0 Password Grant Type API proxy G. Create a new API proxy for a POST /v1/customers/{customerid}

Discussion 0

Correct Answer: B,E,G Vote an answer

Question 8

You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?

A. Use an OAuth2 scope to identify allowed applications and user granted rights B. Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token C. Implement user rights checks in the underlying microservice D. Create a different URL for updates

Discussion 0

Correct Answer: A Vote an answer

Question 9

Which policy is best used to convert a SOAP response to a JSON response'?

A. XMLToJSON B. Message Validation C. SOAPToJSON D. AssignMessage

Discussion 0

Correct Answer: A Vote an answer

Question 10

You have implemented an Apigee Edge API proxy that includes a new shared flow Before you release to production, you need to ensure all dependencies are readied What should you do?

A. Alert the quality analysis team and product owner that you are preparing the release B. Run automated unit tests in the test environment C. Execute static code analysis on the bundle D. Deploy the shared flow to the production environment

Discussion 0

Correct Answer: B Vote an answer

Google Cloud - Apigee Certified API Engineer - Apigee-API-Engineer Exam Practice Test