Free Mule-Arch-202 Practice Questions & Study Guide: Salesforce Certified MuleSoft Platform Integration Architect

Official Exam Details: (Mule-Arch-202)

Exam Code:
Mule-Arch-202
Passing Score:
70%
Total Question Bank:
60 Verified Questions
Exam Duration:
120 Minutes

Exam Format & Question Types

This certification exam features multiple-choice questions (single and multi-select), interactive Hotspots, Hot Areas, and Drag-and-Drop scenario configurations designed to test real-world technical competency.

Mule-Arch-202 Certification Study Guide & Architectural Master Blueprint

1. Exam Overview & Profile

The Mule-Arch-202 certification validates an architect’s ability to design and govern enterprise-level integration solutions using the MuleSoft Anypoint Platform. This exam targets experienced Solution Architects, Technical Architects, and Lead Developers who are responsible for conceptualizing, designing, and guiding the implementation of robust, scalable, and secure API-led connectivity solutions. Candidates are expected to demonstrate a deep understanding of Anypoint Platform components, architectural best practices, and the ability to make critical design decisions across various deployment models.

  • Target Audience: Architects designing MuleSoft Anypoint Platform solutions.
  • Question Count: Approximately 50-60 multiple-choice and multiple-select questions.
  • Duration: 120 minutes.
  • Passing Score Context: Typically around 70-75% (exact percentage may vary but indicates a strong grasp of architectural principles).

2. Deep-Dive Domain Breakdown

2.1. API-led Connectivity & Architectural Patterns

  • System APIs: Design principles for exposing backend systems, ensuring stability and insulation. Focus on canonical models and reusability.
  • Process APIs: Orchestration of multiple System APIs, encapsulation of business logic, and data transformation. Understanding transactionality and idempotency.
  • Experience APIs: Tailoring data and services for specific consumer channels (web, mobile, IoT). Focus on discoverability and consumption.
  • Event-Driven Architecture: Utilizing Anypoint MQ, publishing/subscribing to events, ensuring reliable messaging.
  • Batch Processing: Design considerations for large data volumes, fault tolerance, and performance optimization in Mule applications.

2.2. Runtime Architectures & Deployment Strategies

  • CloudHub: Worker sizing, scaling policies, dedicated vs. shared load balancers, VPC peering, VPN setup. Understanding the shared responsibility model.
  • Runtime Fabric (RTF): Kubernetes/Docker containerization, private space, resource management, high availability, and operational overhead.
  • On-Premise/Hybrid: Mule runtime standalone, clustered deployments, integration with existing infrastructure, security boundaries.
  • CI/CD Integration: Automating deployments, Maven plugin, Anypoint Exchange for API asset management, versioning strategies.

2.3. Security & Governance

  • API Manager Policies: Application of rate limiting, client ID enforcement, JWT validation, IP whitelisting, custom policies. Granular control over API access.
  • Network Security: Anypoint VPC, Private CloudHub, VPNs, direct connect for isolating runtime traffic. TLS/SSL configuration for secure communication.
  • Authentication & Authorization: OAuth 2.0, OpenID Connect, SAML, basic authentication. Managing client credentials and user roles via Anypoint Access Management.
  • Secrets Management: Storing sensitive data (API keys, passwords) securely using Anypoint Secrets Manager or external vaults.
  • API Governance: Design standards, versioning, deprecation strategies, lifecycle management using Anypoint Exchange and API Manager.

2.4. Monitoring, High Availability & Disaster Recovery

  • Anypoint Monitoring: Custom dashboards, alerts, log management, correlation IDs for tracing transactions.
  • Anypoint Analytics: API usage, performance metrics, business insights.
  • High Availability (HA): Worker distribution across regions/zones, Object Store V2 for state persistence and distributed caching. Clustering for on-premise deployments.
  • Disaster Recovery (DR): Multi-region deployments, backup and restore strategies, RTO/RPO considerations for different deployment models.

3. High-Yield Exam Tips & Scenario Traps

  • Prioritize API-led Connectivity: Unless a scenario explicitly dictates otherwise, always default to the 3-layer API-led approach. Understand the benefits (reuse, agility, control) for each layer.
  • Security First: In any architectural decision, robust security is paramount. Look for answers that implement defense-in-depth, combining network isolation (VPC), API policies (API Manager), and strong authentication/authorization.
  • Scalability & Resilience: Always consider worker sizing, horizontal scaling, and the use of Object Store V2 for state management in distributed environments to ensure HA. For critical APIs, multi-region deployment is key.
  • Understand Deployment Trade-offs: Know the pros and cons of CloudHub, RTF, and on-premise. Cost, control, operational complexity, and compliance requirements often dictate the choice. RTF offers more control and resource isolation than CloudHub dedicated workers but adds operational overhead.
  • Scenario Traps:
    • Over-engineering: Don’t recommend complex solutions (e.g., RTF) if simpler CloudHub features (e.g., dedicated load balancer, VPC) meet requirements.
    • Incomplete Security: Be wary of answers that only address one aspect of security (e.g., just API policies without network segmentation).
    • Ignoring Non-Functional Requirements: Solutions must meet performance, scalability, reliability, and maintainability demands, not just functional ones.
    • Misuse of Object Store V2: Understand its purpose (state persistence, distributed cache) and when it’s appropriate versus relying on external databases.
    • Confusing Runtime Manager vs. API Manager: Know their distinct roles in managing deployments vs. governing APIs.

4. Frequently Asked Questions (FAQ)

Q1: What is the most effective way to prepare for the Mule-Arch-202 exam?
A1: A combination of hands-on experience, reviewing official MuleSoft documentation (especially the “Architecting Anypoint Platform” course materials if available), and practical application of architectural patterns is crucial. Focus on understanding the “why” behind design decisions rather than just “how” to configure. Participating in design discussions and reviewing case studies can also be highly beneficial.

Q2: How important is understanding the different deployment models (CloudHub, RTF, On-Premise) for this exam?
A2: Extremely important. A significant portion of the exam will test your ability to select the most appropriate deployment model based on specific business requirements, security constraints, and operational considerations. You must understand the scaling, HA, security, and management implications of each, as well as their respective shared responsibility models.

Q3: Should I focus on specific connectors or DataWeave transformations for this exam?
A3: While a general understanding of how Mule applications integrate data is helpful, this exam is not a development exam. The focus is on architectural patterns, service selection, and design principles rather than specific implementation details of connectors or DataWeave syntax. You need to know when to recommend a batch processing pattern over real-time, or how to design for message durability, rather than how to write a specific DataWeave script.

Q4: What distinguishes this architect exam from a MuleSoft Certified Developer exam?
A4: The Mule-Arch-202 exam focuses on high-level architectural design, strategic decision-making, and platform governance. It evaluates your ability to design the overall solution structure, ensure non-functional requirements are met, and provide guidance on best practices. A developer exam, conversely, focuses on the practical implementation, coding, and debugging of Mule applications, ensuring functional requirements are met within the established architectural guidelines.

Free Mule-Arch-202 Sample Practice Questions

Test your knowledge with these sample scenario questions complete with verified explanations:

General Practice Questions

QUESTION 1

What requirement prevents using Anypoint MQ as the messaging broker for a Mule application?

  • A. When the payload sent through the message broker must be encrypted
  • B. When the messaging broker must be deployed on-premises
  • C. When the payload sent through the message broker must use XML format
  • D. When the messaging broker must support point-to-point messaging
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct) Reasoning: Anypoint MQ is a cloud-based, fully managed messaging service. It cannot be deployed on-premises. If an organization requires the messaging broker to reside within their on-premises data center, Anypoint MQ is not a suitable solution.
❌ Why the other choices are incorrect:

Option A is incorrect: Anypoint MQ supports encryption for messages both in transit (TLS) and at rest, so payload encryption is not a preventing factor.

Option C is incorrect: Anypoint MQ is agnostic to message payload format, allowing XML, JSON, or any other data type. This is not a limiting factor.

Option D is incorrect: Anypoint MQ supports point-to-point messaging via queues, which is a fundamental feature. This requirement does not prevent its usage.

QUESTION 2

A company is modernizing its legacy systems to accelerate access to applications and data while supporting the adoption of new technologies. The key to achieving this business goal is unlocking the company’s systems and data, including a set of existing services hosted on-premises that can be accessed by authorized external clients. The ГГ staff is mainly experienced only with supporting its legacy systems.

Considering the current aggressive backlog and the project delivery requirements, the company wants to take a strategic approach in the first phase of its transformation projects by quickly deploying APIs in Mule runtimes that are able to scale, connect to on-premises systems, and migrate as needed.

Following MuleSoft best practices, what MuleSoft runtime deployment option best meets the company’s goals to begin its digital transformation journey?

  • A. Customer-hosted self-provisioned runtimes
  • B. CloudHub runtimes
  • C. Runtime Fabric on VMs/bare metal
  • D. Customer-hosted runtimes provisioned by a MuleSoft services partner
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct) Reasoning: CloudHub is a fully managed iPaaS (Integration Platform as a Service) offering from MuleSoft. It enables quick deployment, automatic scaling, and easy connectivity to on-premises systems via VPNs. This significantly reduces the operational burden on a company’s IT staff, who are mainly experienced with legacy systems, making it ideal for a strategic first phase of digital transformation with aggressive backlogs.❌ Why the other choices are incorrect:

Option A is incorrect: Customer-hosted self-provisioned runtimes require significant operational expertise for provisioning, scaling, and maintenance, which contradicts the company’s IT staff profile and goal of quick deployment.

Option C is incorrect: Runtime Fabric on VMs/bare metal provides containerized deployments and scaling but requires managing the underlying Kubernetes infrastructure. This introduces a new layer of complexity and skill requirements that may not align with the company’s legacy-focused IT staff for a quick, initial transformation phase.

Option D is incorrect: While a partner can provision customer-hosted runtimes, this still leaves the ongoing operational management and scaling responsibilities with the customer’s IT team, which is not aligned with their current skillset and the need for quick, low-overhead deployment.

QUESTION 3

An airline is architecting an API-led connectivity project to integrate its flight data into an online aggregation website. The connections must allow for secured communication, high performance, and asynchronous message exchange.

What are suitable interface technologies for the connectors in this integration assuming that MuleSoft fully supports those technologies and that Anypoint Connectors exist for these interfaces?

  • A. SOAP over HTTPS -HOP over TLS -gRPC over HTTPS
  • B. AsyncAPI over SQS -AMQP with RabbitMQ -JSON/REST over HTTPS
  • C. XML over ActiveMQ -XML over FTP -XML/REST over HTTPS
  • D. CSV over FTP -YAML over TLS -JSON over HTTPS
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct) Reasoning: This option provides suitable technologies for the stated requirements. AMQP with RabbitMQ and AsyncAPI over SQS are inherently asynchronous, offer high performance, and support secure communication. JSON/REST over HTTPS provides secured, widely adopted synchronous communication with good performance. This combination effectively addresses all aspects of the requirement.
❌ Why the other choices are incorrect:

Option A is incorrect: While gRPC over HTTPS is excellent for high performance and supports streaming (asynchronous patterns), SOAP over HTTPS and IIOP over TLS are primarily synchronous protocols, making them less ideal for dedicated asynchronous message exchange compared to queuing technologies.

Option C is incorrect: XML over FTP is not suitable. FTP is inherently insecure unless explicitly secured (FTPS/SFTP) and is primarily for file transfer, not high-performance real-time API integration or asynchronous message exchange.

Option D is incorrect: CSV over FTP shares the same issues as XML over FTP regarding security and suitability for API integration. YAML over TLS is for data serialization and security, not an asynchronous message exchange protocol.

QUESTION 4

A Mule solution implements an Experience API and System API as Mule applications that process messages in this order:

1. The Experience API receives a request Anypoint MQ message (REQU) with a payload containing a variable-length list of request objects.

2. The Experience API uses a For Each scope to split the list into individual objects and sends each object as a REQU_OBJECT message to an Anypoint MQ queue named REQUEST

3. The System API listens on the REQUEST queue, processes each message independently of all other messages, and sends a response message to a response queue named RESPONSE_OBJECT. The System API processing times can vary and are occasionally fairly long.

4. The Experience API listens on the RESPONSE_OBJECT queue and receives, transforms, and accumulates each response.

5. After receiving all the responses corresponding to the original REQU message, the Experience API creates and publishes a response Anypoint MQ message (RESP) to an Anypoint MQ queue named RESPONSE with a payload containing the list of responses returned by the System API, organized in the same order as the request objects originally sent in the REQU message.

Assume successful response messages are returned by Experience API to the RESPONSE queue for all REQU messages.

What is required so the Experience API can ensure the length and order of the list of objects in RESP and REQU match, while at the same time maximizing message throughput?

  • A. After the For Each scope, add a second For Each scope configured with a persistent object store to collect response messages in the order in which they arrive, and then send the RESP message using this list of responses.
  • B. Use a persistent object store to keep track of the list length and all object indexes in the REQU message, both in the For Each scope and in all communication involving the System API.Set the maxConcurrency parameter for the receiving flow in the Experience API to a value greater than 1.
  • C. Use a Scatter-Gather within the For Each scope to ensure response message orderConfigure the Scatter-Gather with a persistent object store.
  • D. Perform all communication involving the System API synchronously from within the For Each scope so that responses in RESPONSE_OBJECT are in the exact same order as request objects in the RESP message.Within the For Each scope, use an Async scope configured with a persistent object store.
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct)Reasoning: Using a persistent object store to correlate request object indexes with responses ensures correct re-ordering of asynchronously processed messages. Setting maxConcurrency > 1 for the response-receiving flow in the Experience API optimizes throughput by processing responses concurrently as they arrive, fulfilling both ordering and performance requirements.
❌ Why the other choices are incorrect:

Option A is incorrect: A second For Each scope cannot re-order asynchronously arriving messages from a queue, especially when processing times vary. Collecting responses in arrival order doesn’t guarantee the original request order.

Option C is incorrect: Scatter-Gather is a synchronous pattern. Using it within the For Each would force the Experience API to wait for all System API responses sequentially, drastically reducing throughput instead of maximizing it.

Option D is incorrect: Performing communication synchronously from within the For Each scope would block subsequent iterations, making the process sequential and slow, directly contradicting the goal of maximizing message throughput with long, variable processing times.

QUESTION 5

An insurance company is designing a hybrid, load-balanced, single-cluster runtime production environment. Due to performance Service Level Agreement (SLA) goals, it is looking into running the Mule applications in an active-active multi-node cluster configuration.

What should be considered when running its Mule applications in this type of environment?

  • A. Although the cluster environment is fully installed, configured, and running, it will not process any requests until an outage condition is detected by the primary node in the cluster
  • B. A Mule application deployed to multiple nodes runs in isolation from the other nodes in the cluster
  • C. All event sources, regardless of type, can be configured as the target source by the primary node in the cluster
  • D. An external load balancer is required to distribute incoming TCP/HTTP requests throughout the cluster nodes
Click to View Verified Solution & Explanation

Correct Option: D

Explanation:

✅ Option D (Correct) Reasoning: An external load balancer is essential for an active-active Mule cluster to distribute incoming TCP/HTTP requests efficiently across all cluster nodes. This ensures high availability and optimized resource utilization by leveraging the processing capabilities of every node.❌ Why the other choices are incorrect:

Option A is incorrect: This describes an active-passive failover configuration, where a secondary node only activates upon primary node failure. An active-active cluster processes requests simultaneously across all nodes.

Option B is incorrect: Mule applications in a cluster are designed to operate cooperatively, sharing state via object stores and coordinating event sources or schedulers across the nodes.

Option C is incorrect: Not all event sources are managed by a single primary node. For instance, HTTP Listeners distribute requests among all nodes, while only specific sources (e.g., schedulers, JMS exclusive consumers) run on a single cluster node.

QUESTION 6

A marketing organization is designing a Mule application to process campaign data. The Mule application will periodically check for a file in an SFTP location and process the records in the file. The size of the file can vary from 10MB to 5GB. Due to the limited availability of vCores, the Mule application is deployed to a single CloudHub worker/replica configured with vCore size 0.2.

The application must transform and send different formats of this file to three different downstream SFTP locations.

What is the most direct way to configure the SFTP operations or event sources to process the large files to support these deployment requirements?

  • A. Use a file-stored repeatable stream
  • B. Use a file-stored nonrepeatable stream
  • C. Use an in-memory repeatable stream
  • D. Use an in-memory nonrepeatable stream
Click to View Verified Solution & Explanation

Correct Option: A

Explanation:

✅ Option A (Correct) Reasoning: A file-stored repeatable stream efficiently handles large files (up to 5GB) by buffering data to disk, preventing memory issues on a 0.2 vCore worker. Its repeatability allows the application to read and process the file content multiple times for transforming and sending to three distinct downstream SFTP locations.❌ Why the other choices are incorrect:

Option B is incorrect: A file-stored nonrepeatable stream, while handling large files, cannot be read multiple times, making it unsuitable for sending to three different destinations without re-reading the source.

Option C is incorrect: An in-memory repeatable stream would quickly exhaust the limited memory of a 0.2 vCore worker when processing files up to 5GB.

Option D is incorrect: An in-memory nonrepeatable stream suffers from both memory exhaustion for large files and the inability to be read multiple times.

QUESTION 7

A new Mule application has been deployed through Runtime Manager to CloudHub 1.0 using a CI/CD pipeline with sensitive properties set as cleartext. The Runtime Manager Administrator opened a high priority incident ticket about this violation of their security requirements indicating these sensitive properties values must not be stored or visible in Runtime Manager but should be changeable in Runtime Manager by Administrators with proper permissions.

How can the Mule application be deployed while safely hiding the sensitive properties?

  • A. Add encrypted versions of the sensitive properties as global configuration properties in the Mule application
  • B. Add a new wrapper.java.additional.XX parameter for each sensitive property in the wrapper.conf file used by the CI/CD pipeline scripts
  • C. Create a variable for each sensitive property and declare them as hidden in the CI/CD pipeline scripts
  • D. Add an ArrayList of all the sensitive properties' names in the mule-artifact.json file of the application
Click to View Verified Solution & Explanation

Correct Option: C

Explanation:

✅ Option C (Correct) Reasoning: CloudHub applications use environment variables for configuration. Runtime Manager allows setting these properties and marking them as ‘hidden’. This ensures sensitive values are not visible in the UI but remain accessible to the application. Administrators can also directly modify these hidden properties in Runtime Manager, meeting all specified security and changeability requirements.

❌ Why the other choices are incorrect:

  • Option A is incorrect: Embedding encrypted properties directly within the application package makes them less flexible to change in Runtime Manager without redeployment or complex custom mechanisms. The requirement is direct changeability by administrators in Runtime Manager.

  • Option B is incorrect: wrapper.conf is a configuration file primarily for on-premise Mule Runtime standalone installations to configure the JVM, not for applications deployed to CloudHub 1.0. It’s irrelevant for CloudHub deployments.

  • Option D is incorrect: The mule-artifact.json file is for artifact metadata and defining properties that can be overridden, but it does not provide the mechanism for hiding sensitive property values in the Runtime Manager UI or for administrators to change them directly.

QUESTION 8

An organization has built a large monolithic application over the years and is currently looking to transition to a microservices architecture. During this transition phase, it has built some System APIs as Mule applications that provide access to different pieces of functionality of the monolithic application. The System APIs are deployed to Mule runtimes in a customer-hosted EC2 instance in AWS.

The System APIs communicate directly with one database used by the monolithic application. Currently, a Database connector and configuration for that connector must be built into every project. There is a plan to partition this database into various smaller data stores in the future.

What is the MuleSoft-recommended best practice to share the connector and configuration information among the APIs?

  • A. Build a separate Mule domain project for each API, and configure each of them to use a file on a shared file store to load the configuration information dynamically
  • B. Create an API proxy for each System API and share the Database connector configuration with all the API proxies via an automated policy
  • C. Build another System API that connects to the database, and refactor all the other APIs to make requests through the new System API to access the database
  • D. Build a Mule domain project, add the Database connector and configuration to it, and reference this one domain project from each System API
Click to View Verified Solution & Explanation

Correct Option: D

Explanation:

✅ Option D (Correct) Reasoning: Mule domain projects are specifically designed to share common resources, such as Database connectors and their configurations, across multiple Mule applications deployed to the same Mule runtime. This centralizes configuration management and prevents duplication effectively.❌ Why the other choices are incorrect:

Option A is incorrect: Building a separate domain project for each API defeats the purpose of sharing. A single domain project for multiple applications is the correct approach for centralized connector configuration.

Option B is incorrect: API proxies and policies primarily manage external API access, security, and traffic. They are not designed to share internal backend connector configurations among distinct Mule applications.

Option C is incorrect: Creating another System API for database access abstracts the database. However, the question asks for sharing the connector and configuration directly among existing APIs, which a Mule domain project does without adding an extra API layer.

QUESTION 9

An architect is designing a Mule application to meet the following two requirements:

1. The application must process files asynchronously and reliably from an FTPS server to a back-end database using VM intermediary queues for load-balancing Mule events.

2. The application must process a medium rate of records from a source to a target system using a Batch Job scope.

To make the Mule application more reliable, the Mule application will be deployed to two CloudHub 1.0 workers.

Following MuleSoft-recommended best practices, how should the Mule application deployment typically be configured in Runtime Manger to best support the performance and reliability goals of both the Batch Job scope and the file processing VM queues?

  • A. In the Runtime Manager Properties tab, enable persistent VM queues for the FTPS connector
  • B. Check the Non-persistent VM queues checkbox in the application deployment configuration
  • C. In the Runtime Manager Properties tab, disable persistent VM queues for Batch Job scopes
  • D. Check the Persistent VM queues checkbox in the application deployment configuration
Click to View Verified Solution & Explanation

Correct Option: D

Explanation:

✅ Option D (Correct) Reasoning: To achieve reliability and load balancing for VM queues across multiple CloudHub workers, persistent VM queues must be enabled. This ensures messages are stored in CloudHub’s object store, preventing loss if a worker fails and allowing other workers to process them. This directly supports the reliable, asynchronous file processing requirement.
❌ Why the other choices are incorrect:

Option A is incorrect: While persistent VM queues are correct, the phrasing "for the FTPS connector" is imprecise. Persistent VM queues are enabled for the application, affecting all VM queues within it, not a specific connector.

Option B is incorrect: Non-persistent VM queues lose messages on worker restarts or failures, directly contradicting the requirement for reliable processing and load balancing across two workers.

Option C is incorrect: Disabling persistence for Batch Job scopes (if such a direct option were available for VM queues) would undermine, not enhance, reliability. Batch Jobs have internal reliability, but the primary concern here for shared reliability is the VM queues.

QUESTION 10

Refer to the exhibit.

A customer is running Mule applications on Runtime Fabric for Self-Managed Kubernetes (RTF-BYOK8) in a multi-cloud environment.

Based on this configuration, how do Agents and Runtime Manager communicate, and what is exchanged between them?

  • A. Agents communicate with Runtime Manager to provide updates on cluster status, download images, and update Mule applications (automatically when available) from the container registry
  • B. Agents communicate with Runtime Manager to provide updates on cluster status, download images, and update Mule applications (when available and chosen to do so by customer) from the container registry
  • C. Runtime Manager initiates traffic to Agents to check the status of clusters and auto-deploys new images when updates to Mule applications are available
  • D. Runtime Manager communicates with Agents to provide updates on cluster status, download images, and update Mule applications (when available and chosen to do so by customer) from the container registry
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct) Reasoning: In Runtime Fabric, agents within the RTF cluster initiate communication to Anypoint Platform’s Runtime Manager. This outbound-only communication reports cluster status, downloads container images for Mule runtimes and applications from the Container Registry, and facilitates application updates specifically when a customer chooses to deploy or update them via Runtime Manager.
❌ Why the other choices are incorrect:

  • Option A is incorrect: While agents communicate status and download images, application updates are not automatically deployed when available; they require explicit customer action.

  • Option C is incorrect: Runtime Manager does not initiate traffic to agents; communication originates from agents to Runtime Manager. Also, deployments are not typically ‘auto-deployed’ without user intervention.

  • Option D is incorrect: Runtime Manager does not initiate communication with agents. Communication is always initiated from the agents within the Runtime Fabric to the Anypoint Platform for security and firewall reasons.

QUESTION 11

A Mule application is designed to call the Google Maps API to perform a distance computation, and is deployed to CloudHub.

At a minimum, what (if anything) should be configured in the TLS context of the HTTP Request configuration to meet these requirements?

  • A. Download the Google public certificate from a browser, generate a JKS file from it, and add it in TrustStore as part of the TLS context
  • B. The configuration is built-in and nothing extra is required for the TLS context
  • C. Request a private key from Google, create a PKCS#12 file with it, and add it in KeyStore as part of the TLS context
  • D. Download the Google public certificate from a browser, generate a JKS file from it, and add it in KeyStore as part of the TLS context
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct) Reasoning: For calls to public HTTPS APIs like Google Maps, the Java Virtual Machine (JVM) running the Mule application in CloudHub implicitly trusts certificates issued by well-known Certificate Authorities (CAs). The JVM’s default truststore already contains these root certificates, so no explicit TLS configuration is needed for server trust.❌ Why the other choices are incorrect:

Option A is incorrect: While technically adding Google’s public certificate to a truststore would work, it is redundant. The JVM’s default truststore already includes the necessary root certificates for widely recognized CAs that issue Google’s certificate.

Option C is incorrect: A private key is used for server identity or client authentication. Google will not provide its private key, and a KeyStore stores the client’s own private key, not certificates for trusting external servers.

Option D is incorrect: A KeyStore is used for storing the client’s own private key and identity certificate for client authentication. It is not used for storing public certificates of external servers to establish trust; that function belongs to a TrustStore.

QUESTION 12

A bank is implementing a REST API in a Mule application to receive an array of accounts from an online banking platform user interface (UI), retrieve account balances for those accounts from a backend Finance system, and then return the account balances so they can be displayed in the online banking platform UI. As part of the processing, the MuleSoft API also needs to insert the retrieved account data into an Audit Database for auditing purposes, the auditing process should not add latency to the account balance retrieval response back to the online banking platform UI.

The retrieveBalances flow in the Mule application is designed to use an operation in a connector to the Finance system (the Finance operation) that can only look up one account record at a time, and a operation from a different connector to the Audit system (the Audit operation) that can only insert one account record at a time.

To best meet the performance-related requirements, what scope or scopes should be used and how should they be used to incorporate the Finance operation and Audit operation into the retrieveBalances flow?

  • A. Wrap both connector operations in a Async scope.
  • B. Wrap both connector operations in a For-Each scope.
  • C. Wrap the Finance operation in a Until-Successful scope.Wrap the Audit operation in a Try-Catch scope.
  • D. Wrap the Finance operation in a Parallel For-Each scope.Wrap the Audit operation in a Async scope.
Click to View Verified Solution & Explanation

Correct Option: D

Explanation:

✅ Option D (Correct) Reasoning: The Parallel For-Each scope allows concurrent processing of each account for balance retrieval, maximizing performance. Wrapping the Audit operation in an Async scope ensures that the auditing process for each account runs in the background, preventing it from adding latency to the response returned to the online banking platform UI. This combination efficiently handles the array of accounts while meeting all performance and latency requirements.❌ Why the other choices are incorrect:

Option A is incorrect: Wrapping both in an Async scope doesn’t address the iteration over an array of accounts efficiently for the Finance operation, nor does it guarantee the best performance for concurrent lookups.

Option B is incorrect: A For-Each scope processes items sequentially. This would severely impact performance for retrieving balances for an array of accounts, failing to meet the performance requirement.

Option C is incorrect: Until-Successful is for retries, and Try-Catch is for error handling. Neither addresses the core requirements of concurrent processing for an array of accounts or asynchronous auditing for performance.

Need the Full Exam Simulator?

Practice the complete question bank in a realistic, timed environment with advanced tracking.

Access Full CertoMetrics Engine →

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top