APIGEE-API-ENGINEER Online Practice Questions and Answers

An API product in Apigee can be used to

A. restrict access to a set of APIs

B. configure the quota limits for APIs

C. restrict access to APIs in different environments

D. all of the above

You have a requirement to expose functions and data from an existing back-end system Using Apigee recommended practices, which step should you take first*?

A. Write business and functional requirements documents.

B. Implement ad-hoc microservices using a managed container system.

C. Catalog the data model of the backing data store or API into a data dictionary

D. Work with the existing or targeted application consumers to build an Open API Specification model

You are working on a project that adheres strictly to the Roy Fielding REST concepts. You need to update a single property named "status" of a complicated entity What should you do?

A. Fetch the full entity, update the status value locally. DELETE the original entity and POST the new version.

B. Fetch the full entity. Change only the status value and then send the whole object in the request body of the PUT service

C. Create a new service that uses the UPDATE verb that accepts the "status* property and updates the entity UPDATE /api/trucks/42/status HTTP/1.1 {status: 5}

D. Create a new service that uses the PATCH verb designed to update only given fields. PATCH /api/trucks/42 HTTP/1.1 {status: 5}

As an API Engineer you get a calendar invite for a backlog grooming session. What should you expect to take place in the meeting?

A. Review the Epics and meet the cross functional team

B. Review and update the user stories and tasks in detail.

C. Review the high level design document and ask questions

D. Update support tickets that have been sitting for x number of days

You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?

A. Hardcoded in Assign Message policy

B. Stored in Key-Value Maps and accessed at run time.

C. Stored in configuration files and make use at run time.

D. Stored in encrypted Key-Value Maps and access at run time.

You have a new set of requirements for a mobile app. The product team tells you that the user data already exists from the website version of the app. The user APIs are currently internal access only. The product team has asked for the following.

1.

The app requires user authentication before data should be accessed.

2.

The app needs to display user data once the user has logged into the mobile app.

3.

The app needs to allow changes to user data once the user has logged into the mobile app.

Choose three development tasks that would accomplish the requirements. Choose 3 answers

A. Create an Oauth 2 0 Service Account API proxy

B. Create an Oauth 2.0 Password Grant Type API proxy

C. Create an Oauth 2.0 Client Credential Flow Grant Type API proxy

D. Create a new API proxy for a GET /v1/customers/{customerid}

E. Create a new API proxy for a PUT/v1/customers/{customerid}

F. Create a new API proxy for a POST /v1/customers/{customerid}

G. Create a new API proxy for a DELETE/v1/customers/{customerid}

You have a single back end that needs to be exposed to customers using different API request and response payloads You need to allow these different request types without breaking existing implementations What should you do?

A. Create a new API proxy for new customers and invoke backend target system with required parameters.

B. Configure the API as a pass-through proxy and invoke backend target system with client request parameters.

C. Create a new proxy xml and base path with upgraded version and invoke backend target system with required parameters

D. Include a new customer requirement in an existing API proxy and invoke backend target system with required parameters.

Which is the recommended solution lo specify a different backend target for each environment?

A. Java/JavaScript/Python callout

B. TargetEndpoint configuration

C. RouteRules

D. TargetServer

You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?

A. Create a different URL for updates

B. Implement user rights checks in the underlying microservice

C. Use an OAuth2 scope to identify allowed applications and user granted rights

D. Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token

What are the HTTPTargetConneclion properties to control network timeouts?

A. response millis and connect.millis

B. target.timeout and proxy timeout

C. connect.timeout.millis and io.timeoutmillis

D. connect timeout and network timeout