Salesforce Certified MuleSoft Platform Architect Exam Free Dumps

dumps2025-08-06T10:50:53+08:00

Salesforce Certified MuleSoft Platform Architect exam is designed for individuals who have experience defining and being responsible for an organization’s Anypoint Platform strategy. Passing Salesforce Certified MuleSoft Platform Architect exam is not difficult now. There are 60 multiple-choice questions and up to five non-scored questions in real Salesforce Certified MuleSoft Platform Architect exam, and you have 120 minutes to answer all the questions. The required passing score is 70%. The registration fee is $400, and the retake fee is $200. We provide the latest Salesforce Certified MuleSoft Platform Architect exam dumps, which can ensure you pass the test easily. Free Salesforce Certified MuleSoft Platform Architect exam dumps are available below.

Page 1 of 5

1. What API policy would LEAST likely be applied to a Process API?

Custom circuit breaker

Client ID enforcement

Rate limiting

JSON threat protection

2. What is a key performance indicator (KPI) that measures the success of a typical C4E that is immediately apparent in responses from the Anypoint Platform APIs?

The number of production outage incidents reported in the last 24 hours

The number of API implementations that have a publicly accessible HTTP endpoint and are being managed by Anypoint Platform

The fraction of API implementations deployed manually relative to those deployed using a CI/CD tool

The number of API specifications in RAML or OAS format published to Anypoint Exchange

3. An organization is implementing a Quote of the Day API that caches today's quote.

What scenario can use the GoudHub Object Store via the Object Store connector to persist the cache's state?

When there are three CloudHub deployments of the API implementation to three separate CloudHub regions that must share the cache state

When there are two CloudHub deployments of the API implementation by two Anypoint Platform business groups to the same CloudHub region that must share the cache state

When there is one deployment of the API implementation to CloudHub and anottV deployment to a customer-hosted Mule runtime that must share the cache state

When there is one CloudHub deployment of the API implementation to three CloudHub workers that must share the cache state

4. What condition requires using a CloudHub Dedicated Load Balancer?

When cross-region load balancing is required between separate deployments of the same Mule application

When custom DNS names are required for API implementations deployed to customer-hosted Mule runtimes

When API invocations across multiple CloudHub workers must be load balanced

When server-side load-balanced TLS mutual authentication is required between API implementations and API clients

5. What do the API invocation metrics provided by Anypoint Platform provide?

ROI metrics from APIs that can be directly shared with business users

Measurements of the effectiveness of the application network based on the level of reuse

Data on past API invocations to help identify anomalies and usage patterns across various APIs

Proactive identification of likely future policy violations that exceed a given threat threshold

6. What is true about the technology architecture of Anypoint VPCs?

The private IP address range of an Anypoint VPC is automatically chosen by CloudHub

Traffic between Mule applications deployed to an Anypoint VPC and on-premises systems can stay within a private network

Each CloudHub environment requires a separate Anypoint VPC

VPC peering can be used to link the underlying AWS VPC to an on-premises (non AWS) private network

7. An API implementation is deployed on a single worker on CloudHub and invoked by external API clients (outside of CloudHub).

How can an alert be set up that is guaranteed to trigger AS SOON AS that API implementation stops responding to API invocations?

Implement a heartbeat/health check within the API and invoke it from outside the Anypoint Platform and alert when the heartbeat does not respond

Configure a "worker not responding" alert in Anypoint Runtime Manager

Handle API invocation exceptions within the calling API client and raise an alert from that API client when the API Is unavailable

Create an alert for when the API receives no requests within a specified time period

8. The implementation of a Process API must change.

What is a valid approach that minimizes the impact of this change on API clients?

Update the RAML definition of the current Process API and notify API client developers by sending them links to the updated RAML definition

Postpone changes until API consumers acknowledge they are ready to migrate to a new Process API or API version

Implement required changes to the Process API implementation so that whenever possible, the Process API's RAML definition remains unchanged

Implement the Process API changes in a new API implementation, and have the old API implementation return an HTTP status code 301 - Moved Permanently to inform API clients they should be calling the new API implementation

9. Refer to the exhibit.

An organization needs to enable access to their customer data from both a mobile app and a web application, which each need access to common fields as well as certain unique fields.

The data is available partially in a database and partially in a 3rd-party CRM system.

What APIs should be created to best fit these design requirements?

A) A Process API that contains the data required by both the web and mobile apps, allowing these applications to invoke it directly and access the data they need thereby providing the flexibility to add more fields in the future without needing API changes

B) One set of APIs (Experience API, Process API, and System API) for the web app, and another set for the mobile app

C) Separate Experience APIs for the mobile and web app, but a common Process API that invokes separate System APIs created for the database and CRM system

D) A common Experience API used by both the web and mobile apps, but separate Process APIs for the web and mobile apps that interact with the database and the CRM System

Option A

Option B

Option C

Option D

10. Refer to the exhibit.

A developer is building a client application to invoke an API deployed to the STAGING environment that is governed by a client ID enforcement policy.

What is required to successfully invoke the API?

The client ID and secret for the Anypoint Platform account owning the API in the STAGING environment

The client ID and secret for the Anypoint Platform account's STAGING environment

The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment

A valid OAuth token obtained from Anypoint Platform and its associated client ID and secret

Page 2 of 5

11. In an organization, the InfoSec team is investigating Anypoint Platform related data traffic.

From where does most of the data available to Anypoint Platform for monitoring and alerting originate?

From the Mule runtime or the API implementation, depending on the deployment model

From various components of Anypoint Platform, such as the Shared Load Balancer, VPC, and Mule runtimes

From the Mule runtime or the API Manager, depending on the type of data

From the Mule runtime irrespective of the deployment model

12. When designing an upstream API and its implementation, the development team has been advised to NOT set timeouts when invoking a downstream API, because that downstream API has no SLA that can be relied upon. This is the only downstream API dependency of that upstream API.

Assume the downstream API runs uninterrupted without crashing.

What is the impact of this advice?

An SLA for the upstream API CANNOT be provided

The invocation of the downstream API will run to completion without timing out

A default timeout of 500 ms will automatically be applied by the Mule runtime in which the upstream API implementation executes

A toad-dependent timeout of less than 1000 ms will be applied by the Mule runtime in which the downstream API implementation executes

13. What best explains the use of auto-discovery in API implementations?

It makes API Manager aware of API implementations and hence enables it to enforce policies

It enables Anypoint Studio to discover API definitions configured in Anypoint Platform

It enables Anypoint Exchange to discover assets and makes them available for reuse

It enables Anypoint Analytics to gain insight into the usage of APIs

14. What should be ensured before sharing an API through a public Anypoint Exchange portal?

The visibility level of the API instances of that API that need to be publicly accessible should be set to public visibility

The users needing access to the API should be added to the appropriate role in Anypoint Platform

The API should be functional with at least an initial implementation deployed and accessible for users to interact with

The API should be secured using one of the supported authentication/authorization mechanisms to ensure that data is not compromised

15. Refer to the exhibit.

A RAML definition has been proposed for a new Promotions Process API, and has been published to Anypoint Exchange.

The Marketing Department, who will be an important consumer of the Promotions API, has important requirements and expectations that must be met.

What is the most effective way to use Anypoint Platform features to involve the Marketing Department in this early API design phase?

A) Ask the Marketing Department to interact with a mocking implementation of the API using the automatically generated API Console

B) Organize a design workshop with the DBAs of the Marketing Department in which the database schema of the Marketing IT systems is translated into RAML

C) Use Anypoint Studio to Implement the API as a Mule application, then deploy that API implementation to CloudHub and ask the Marketing Department to interact with it

D) Export an integration test suite from API designer and have the Marketing Department execute the tests In that suite to ensure they pass

Option A

Option B

Option C

Option D

16. Refer to the exhibit.

What is true when using customer-hosted Mule runtimes with the MuleSoft-hosted Anypoint Platform control plane (hybrid deployment)?

Anypoint Runtime Manager initiates a network connection to a Mule runtime in order to deploy Mule applications

The MuleSoft-hosted Shared Load Balancer can be used to load balance API invocations to the Mule runtimes

API implementations can run successfully in customer-hosted Mule runtimes, even when they are unable to communicate with the control plane

Anypoint Runtime Manager automatically ensures HA in the control plane by creating a new Mule runtime instance in case of a node failure

17. A System API is designed to retrieve data from a backend system that has scalability challenges.

What API policy can best safeguard the backend system?

IP whitelist

SLA-based rate limiting

Auth 2 token enforcement

Client ID enforcement

18. Refer to the exhibit.

What is a valid API in the sense of API-led connectivity and application networks?

A) Java RMI over TCP

B) Java RMI over TCP

C) CORBA over HOP

D) XML over UDP

Option A

Option B

Option C

Option D

19. Refer to the exhibit.

Three business processes need to be implemented, and the implementations need to communicate with several different SaaS applications.

These processes are owned by separate (siloed) LOBs and are mainly independent of each other, but do share a few business entities. Each LOB has one development team and their own budget.

In this organizational context, what is the most effective approach to choose the API data models for the APIs that will implement these business processes with minimal redundancy of the data models?

A) Build several Bounded Context Data Models that align with coherent parts of the business processes and the definitions of associated business entities

B) Build distinct data models for each API to follow established micro-services and Agile API-centric practices

C) Build all API data models using XML schema to drive consistency and reuse across the organization

D) Build one centralized Canonical Data Model (Enterprise Data Model) that unifies all the data types from all three business processes, ensuring the data model is consistent and non-redundant

Option A

Option B

Option C

Option D

20. What best describes the Fully Qualified Domain Names (FQDNs), also known as DNS entries, created when a Mule application is deployed to the CloudHub Shared Worker Cloud?

A fixed number of FQDNs are created, IRRESPECTIVE of the environment and VPC design

The FQDNs are determined by the application name chosen, IRRESPECTIVE of the region

The FQDNs are determined by the application name, but can be modified by an administrator after deployment

The FQDNs are determined by both the application name and the Anypoint Platform organization

Page 3 of 5

21. When using CloudHub with the Shared Load Balancer, what is managed EXCLUSIVELY by the API implementation (the Mule application) and NOT by Anypoint Platform?

The assignment of each HTTP request to a particular CloudHub worker

The logging configuration that enables log entries to be visible in Runtime Manager

The SSL certificates used by the API implementation to expose HTTPS endpoints

The number of DNS entries allocated to the API implementation

22. Refer to the exhibit.

What is the best way to decompose one end-to-end business process into a collaboration of Experience, Process, and System APIs?

A) Handle customizations for the end-user application at the Process API level rather than the Experience API level

B) Allow System APIs to return data that is NOT currently required by the identified Process or Experience APIs

C) Always use a tiered approach by creating exactly one API for each of the 3 layers (Experience, Process and System APIs)

D) Use a Process API to orchestrate calls to multiple System APIs, but NOT to other Process APIs

Option A

Option B

Option C

Option D

23. What is true about where an API policy is defined in Anypoint Platform and how it is then applied to API instances?

The API policy Is defined In Runtime Manager as part of the API deployment to a Mule runtime, and then ONLY applied to the specific API Instance

The API policy Is defined In API Manager for a specific API Instance, and then ONLY applied to the specific API instance

The API policy Is defined in API Manager and then automatically applied to ALL API instances

The API policy is defined in API Manager, and then applied to ALL API instances in the specified environment

24. An API implementation is deployed to CloudHub.

What conditions can be alerted on using the default Anypoint Platform functionality, where the alert conditions depend on the end-to-end request processing of the API implementation?

When the API is invoked by an unrecognized API client

When a particular API client invokes the API too often within a given time period

When the response time of API invocations exceeds a threshold

When the API receives a very high number of API invocations

25. A Mule application exposes an HTTPS endpoint and is deployed to the CloudHub Shared Worker Cloud. All traffic to that Mule application must stay inside the AWS VPC.

To what TCP port do API invocations to that Mule application need to be sent?

443

8081

8091

8082

26. What is a key requirement when using an external Identity Provider for Client Management in Anypoint Platform?

Single sign-on is required to sign in to Anypoint Platform

The application network must include System APIs that interact with the Identity Provider

To invoke OAuth 2.0-protected APIs managed by Anypoint Platform, API clients must submit access tokens issued by that same Identity Provider

APIs managed by Anypoint Platform must be protected by SAML 2.0 policies

27. The responses to some HTTP requests can be cached depending on the HTTP verb used in the request. According to the HTTP specification, for what HTTP verbs is this safe to do?

PUT, POST, DELETE

GET, HEAD, POST

GET, PUT, OPTIONS

GET, OPTIONS, HEAD

28. What is the most performant out-of-the-box solution in Anypoint Platform to track transaction state in an asynchronously executing long-running process implemented as a Mule application deployed to multiple CloudHub workers?

Redis distributed cache

java.util.WeakHashMap

Persistent Object Store

File-based storage

29. How can the application of a rate limiting API policy be accurately reflected in the RAML definition of an API?

By refining the resource definitions by adding a description of the rate limiting policy behavior

By refining the request definitions by adding a remaining Requests query parameter with description, type, and example

By refining the response definitions by adding the out-of-the-box Anypoint Platform rate-limit-enforcement security Scheme with description, type, and example

By refining the response definitions by adding the x-ratelimit-* response headers with description, type, and example

30. An organization has several APIs that accept JSON data over HTTP POST. The APIs are all publicly available and are associated with several mobile applications and web applications.

The organization does NOT want to use any authentication or compliance policies for these APIs, but at the same time, is worried that some bad actor could send payloads that could somehow compromise the applications or servers running the API implementations.

What out-of-the-box Anypoint Platform policy can address exposure to this threat?

Shut out bad actors by using HTTPS mutual authentication for all API invocations

Apply an IP blacklist policy to all APIs; the blacklist will Include all bad actors

Apply a Header injection and removal policy that detects the malicious data before it is used

Apply a JSON threat protection policy to all APIs to detect potential threat vectors

Page 4 of 5

31. An API experiences a high rate of client requests (TPS) with small message paytoads.

How can usage limits be imposed on the API based on the type of client application?

Use an SLA-based rate limiting policy and assign a client application to a matching SLA tier based on its type

Use a spike control policy that limits the number of requests for each client application type

Use a cross-origin resource sharing (CORS) policy to limit resource sharing between client applications, configured by the client application type

Use a rate limiting policy and a client ID enforcement policy, each configured by the client application type

32. A code-centric API documentation environment should allow API consumers to investigate and execute API client source code that demonstrates invoking one or more APIs as part of representative scenarios.

What is the most effective way to provide this type of code-centric API documentation environment using Anypoint Platform?

Enable mocking services for each of the relevant APIs and expose them via their Anypoint Exchange entry

Ensure the APIs are well documented through their Anypoint Exchange entries and API Consoles and share these pages with all API consumers

Create API Notebooks and include them in the relevant Anypoint Exchange entries

Make relevant APIs discoverable via an Anypoint Exchange entry

33. Refer to the exhibit. An organization is running a Mule standalone runtime and has configured Active Directory as the Anypoint Platform external Identity Provider. The organization does not have budget for other system components.

What policy should be applied to all instances of APIs in the organization to most effecuvelyKestrict access to a specific group of internal users?

Apply a basic authentication - LDAP policy; the internal Active Directory will be configured as the LDAP source for authenticating users

Apply a client ID enforcement policy; the specific group of users will configure their client applications to use their specific client credentials

Apply an IP whitelist policy; only the specific users' workstations will be in the whitelist

Apply an OAuth 2.0 access token enforcement policy; the internal Active Directory will be configured as the OAuth server

34. What is a best practice when building System APIs?

Document the API using an easily consumable asset like a RAML definition

Model all API resources and methods to closely mimic the operations of the backend system

Build an Enterprise Data Model (Canonical Data Model) for each backend system and apply it to System APIs

Expose to API clients all technical details of the API implementation's interaction wifch the backend system

35. What CANNOT be effectively enforced using an API policy in Anypoint Platform?

Guarding against Denial of Service attacks

Maintaining tamper-proof credentials between APIs

Logging HTTP requests and responses

Backend system overloading

36. An organization makes a strategic decision to move towards an IT operating model that emphasizes consumption of reusable IT assets using modern APIs (as defined by MuleSoft).

What best describes each modern API in relation to this new IT operating model?

Each modern API has its own software development lifecycle, which reduces the need for documentation and automation

Each modem API must be treated like a product and designed for a particular target audience (for instance, mobile app developers)

Each modern API must be easy to consume, so should avoid complex authentication mechanisms such as SAML or JWT D

Each modern API must be REST and HTTP based

37. What API policy would be LEAST LIKELY used when designing an Experience API that is intended to work with a consumer mobile phone or tablet application?

OAuth 2.0 access token enforcement

Client ID enforcement

JSON threat protection

IP whitellst

38. A new upstream API Is being designed to offer an SLA of 500 ms median and 800 ms maximum (99th percentile) response time. The corresponding API implementation needs to sequentially invoke 3 downstream APIs of very similar complexity.

The first of these downstream APIs offers the following SLA for its response time: median: 100 ms,

80th percentile: 500 ms, 95th percentile: 1000 ms.

If possible, how can a timeout be set in the upstream API for the invocation of the first downstream API to meet the new upstream API's desired SLA?

Set a timeout of 50 ms; this times out more invocations of that API but gives additional room for retries

Set a timeout of 100 ms; that leaves 400 ms for the other two downstream APIs to complete

No timeout is possible to meet the upstream API's desired SLA; a different SLA must be negotiated with the first downstream API or invoke an alternative API

Do not set a timeout; the Invocation of this API Is mandatory and so we must wait until it responds

39. What is true about automating interactions with Anypoint Platform using tools such as Anypoint Platform REST APIs, Anypoint CU, or the Mule Maven plugin?

Access to Anypoint Platform APIs and Anypoint CU can be controlled separately through the roles and permissions in Anypoint Platform, so that specific users can get access to Anypoint CLI white others get access to the platform APIs

Anypoint Platform APIs can ONLY automate interactions with CloudHub, while the Mule Maven plugin is required for deployment to customer-hosted Mule runtimes

By default, the Anypoint CLI and Mule Maven plugin are NOT included in the Mule runtime, so are NOT available to be used by deployed Mule applications

API policies can be applied to the Anypoint Platform APIs so that ONLY certain LOBs have access to specific functions

40. What Mule application deployment scenario requires using Anypoint Platform Private Cloud Edition or Anypoint Platform for Pivotal Cloud Foundry?

When it Is required to make ALL applications highly available across multiple data centers

When it is required that ALL APIs are private and NOT exposed to the public cloud

When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data

When ALL backend systems in the application network are deployed in the organization's intranet

Page 5 of 5

41. What is typically NOT a function of the APIs created within the framework called API-led connectivity?

They provide an additional layer of resilience on top of the underlying backend system, thereby insulating clients from extended failure of these systems.

They allow for innovation at the user Interface level by consuming the underlying assets without being aware of how data Is being extracted from backend systems.

They reduce the dependency on the underlying backend systems by helping unlock data from backend systems In a reusable and consumable way.

They can compose data from various sources and combine them with orchestration logic to create higher level value.

42. An organization has implemented a Customer Address API to retrieve customer address information. This API has been deployed to multiple environments and has been configured to enforce client IDs everywhere.

A developer is writing a client application to allow a user to update their address. The developer has found the Customer Address API in Anypoint Exchange and wants to use it in their client application.

What step of gaining access to the API can be performed automatically by Anypoint Platform?

Approve the client application request for the chosen SLA tier

Request access to the appropriate API Instances deployed to multiple environments using the client application's credentials

Modify the client application to call the API using the client application's credentials

Create a new application in Anypoint Exchange for requesting access to the API

43. What is a typical result of using a fine-grained rather than a coarse-grained API deployment model to implement a given business process?

A decrease in the number of connections within the application network supporting the business process

A higher number of discoverable API-related assets in the application network

A better response time for the end user as a result of the APIs being smaller in scope and complexity

An overall tower usage of resources because each fine-grained API consumes less resources

44. What correctly characterizes unit tests of Mule applications?

They test the validity of input and output of source and target systems

They must be run in a unit testing environment with dedicated Mule runtimes for the environment

They must be triggered by an external client tool or event source

They are typically written using MUnit to run in an embedded Mule runtime that does not require external connectivity

45. An organization is deploying their new implementation of the OrderStatus System API to multiple workers in CloudHub. This API fronts the organization's on-premises Order Management System, which is accessed by the API implementation over an IPsec tunnel.

What type of error typically does NOT result in a service outage of the OrderStatus System API?

A CloudHub worker fails with an out-of-memory exception

API Manager has an extended outage during the initial deployment of the API implementation

The AWS region goes offline with a major network failure to the relevant AWS data centers

The Order Management System is Inaccessible due to a network outage in the organization's on-premises data center

46. An Order API must be designed that contains significant amounts of integration logic and involves the invocation of the Product API.

The power relationship between Order API and Product API is one of "Customer/Supplier", because the Product API is used heavily throughout the organization and is developed by a dedicated development team located in the office of the CTO.

What strategy should be used to deal with the API data model of the Product API within the Order API?

Convince the development team of the Product API to adopt the API data model of the Order API such that the integration logic of the Order API can work with one consistent internal data model

Work with the API data types of the Product API directly when implementing the integration logic of the Order API such that the Order API uses the same (unchanged) data types as the Product API

Implement an anti-corruption layer in the Order API that transforms the Product API data model into internal data types of the Order API

Start an organization-wide data modeling initiative that will result in an Enterprise Data Model that will then be used in both the Product API and the Order API

47. An API implementation is being designed that must invoke an Order API, which is known to repeatedly experience downtime.

For this reason, a fallback API is to be called when the Order API is unavailable.

What approach to designing the invocation of the fallback API provides the best resilience?

Search Anypoint Exchange for a suitable existing fallback API, and then implement invocations to this fallback API in addition to the Order API

Create a separate entry for the Order API in API Manager, and then invoke this API as a fallback API if the primary Order API is unavailable

Redirect client requests through an HTTP 307 Temporary Redirect status code to the fallback API whenever the Order API is unavailable

Set an option in the HTTP Requester component that invokes the Order API to instead invoke a fallback API whenever an HTTP 4xx or 5xx response status code is returned from the Order API

48. How are an API implementation, API client, and API consumer combined to invoke and process an API?

The API consumer creates an API implementation, which receives API invocations from an API such that they are processed for an API client

The API client creates an API consumer, which receives API invocations from an API such that they are processed for an API implementation

The ApI consumer creates an API client, which sends API invocations to an API such that they are processed by an API implementation

The ApI client creates an API consumer, which sends API invocations to an API such that they are processed by an API implementation

49. An organization uses various cloud-based SaaS systems and multiple on-premises systems. The on-premises systems are an important part of the organization's application network and can only be accessed from within the organization's intranet.

What is the best way to configure and use Anypoint Platform to support integrations with both the cloud-based SaaS systems and on-premises systems?

A) Use CloudHub-deployed Mule runtimes in an Anypoint VPC managed by Anypoint Platform Private Cloud Edition control plane

B) Use CloudHub-deployed Mule runtimes in the shared worker cloud managed by the MuleSoft-hosted Anypoint Platform control plane

C) Use an on-premises installation of Mule runtimes that are completely isolated with NO external network access, managed by the Anypoint Platform Private Cloud Edition control plane

D) Use a combination of Cloud Hub-deployed and manually provisioned on-premises Mule runtimes managed by the MuleSoft-hosted Anypoint Platform control plane

Option A

Option B

Option C

Option D

50. When must an API implementation be deployed to an Anypoint VPC?

When the API Implementation must invoke publicly exposed services that are deployed outside of CloudHub in a customer- managed AWS instance

When the API implementation must be accessible within a subnet of a restricted customer-hosted network that does not allow public access

When the API implementation must be deployed to a production AWS VPC using the Mule Maven plugin

When the API Implementation must write to a persistent Object Store

Salesforce Certified MuleSoft Platform Architect Exam Free Dumps

Salesforce Certified MuleSoft Platform Architect Exam Free Dumps

Share this post

Related Posts