Apigee API Engineer Exam Questions

1. How many times can an authorization code be used to obtain an access token?

Unlimited until it expires

Unlimited as long as requests come within specified time of authorization code creation

2. When is it appropriate to use query parameters in RESTful API design? Select all that are correct

When passing username and passwords.

When providing the ability to return different levels of detail in the response.

When requesting that an entire collection be deleted.

When filtering the response based upon a query

3. What does the variable “message.content” represent?

the request content in the request flow

the response content in the response flow

the request content when in the request flow and the response content when in the response flow

neither the request content nor the response content

4. Which features are supported in the OAulhV2 policy’? Select all that are correct. Choose 3 answers

setting custom attributes for generated access tokens

storing external access tokens

credentials validation when password grantjype is used

setting different expiration for refresh and access tokens

5. Which describe OAuth 2.0 Refresh Tokens’? Select all that are correct

can be used to generate or renew access tokens

is always issued with every access token

can be used to reset crederfflals

may be reused multiple times to create new access tokens

6. The performance testing team would like to improve the transactions per second for an API you recently developed. The API retrieves partner names and contact information.

What should you do?

Add Caching Policies

Add a Spike Arrest Policy

Add an Assign Message Policy

Add a Statistics Collector Policy

7. Which feature can be used to automatically distribute traffic across multiple target servers’?

use a concurrent rate limiting policy

use a LoadBalancer entry in the HTTPTargelConnection session

use RouteRules with multiple TargetEndpoints

use an AssignMessage policy

8. Which features are supported in the OAuthV2 policy? Choose 3 answers

Storing of external access tokens

Setting custom attributes for generated access tokens

Credentials validation when password grant type is used

Setting different expiration for refresh and access tokens.

9. As an API Engineer your team is deploying code to production tonight. The test team will spend most of the night ensuring there are no bugs in the new release. After you deploy you want to go home.

What is the best way to quickly verify a complete deployment?

Unit tests

Smoke tests.

Integration tests.

Code quality analysis.

10. You are working on a project that adheres strictly to the Roy Fielding REST concepts. You need to update a single property named “status” of a complicated entity.

What should you do?

Fetch the full entity, update the status value locally. DELETE the original entity and POST the new version.

Fetch the full entity. Change only the status value and then send the whole object in the request body of the PUT service

Create a new service that uses the UPDATE verb that accepts the “status* property and updates the entity UPDATE /api/trucks/42/status HTTP/1.1 {status: 5}

Create a new service that uses the PATCH verb designed to update only given fields. PATCH /api/trucks/42 HTTP/1.1 {status: 5}

11. You are using Apigee Edge as the OAuth Resource Server. The product owner asks you to create an API that logs a user out by revoking OAuth tokens.

What should you do?

Use the InvalidateToken operation with cascade=true

Use the InvalidateToken operation with cascade=false

Store a list of revoked tokens in Firebase. On each access, check the list and only allow unrevoked tokens through

Store a list of revoked tokens in Key-Value Maps. On each access, check the list and only allow unrevoked tokens through

12. When retrieving a value from an encrypted KVM. the variable name to which it is assigned must be prefixed with which value to prevent it from being readable in tracing sessions?

encrypted

mask

kvm

private

hidden

13. Which Edge Microgateway plugin does not need to be explicitly added to the plugin sequence attribute configuration for execution?

analytics

oauth

quota

spike arrest

14. Which approaches can be used for extracting data from a SOAP body and returning it as a JSON response in Apigee Edge? Select all that are correct. Choose 3 answers

Use XSLT to transform the XML payload and then use a XML to JSON policy

Use XML to JSON policy first to convert to JSON and then ExtractVariables with a JSONPath to extract the body from the converted SOAP envelope

Use ExtractVariables with an XPath first to extract the SOAP body and then use XML to JSON policy

Use an AssignMessage policy to convert the SOAP response to a JSON response, using XPath expressions to retrieve the data

15. How can we specrfy the type of Security (basic auth, oauth) used by the API in OpenAPI Specification 2.0?

specify using the secuntyDefinrtions name property

specify using the secuntySchemas name property

specify using the security Variables name properly

specify using the securityParams name property

16. You need to log certain data to a custom logging service while processing the response You want to avoid processing delays due to logging during the logic flow.

What should you do?

Use a Node.JS target to implement a nonblocking call.

Attach a Message Logging policy to the Post Client Flow

Implement a Java Extension Callout with a worker thread

Use an asynchronous Service Callout policy in your proxy (low as soon as you have enough data to log

17. As an API Engineer you are approached late in the day with an emergency request to configure a 2 way TLS connection between Apigee and the backend server. All existing certificates have been revoked. The security team provides you the PEM file for the backend server and your new Apigee TLS certificate.

What minimum steps are required to reconfigure 2-way TLS? Choose 2 answers

Add your Apigee TLS certificate to the key store.

Add the backend servers PEM file to the key store.

Add the backend certificate chain to the trust store

Add the backend servers PEM file to the trust store.

Use the KVM to store the contents of the PEM file.

Use the Access Control Policy to reference the PEM file

18. When using a Shared Flow from a Flow Hook, which proxies will call the Shared Flow?

All proxies in the environment where the Flow Hook is configured

Only proxies that contain a Flow Callout policy

All proxies within an Organization

Only proxies with the Flow Hook checkbox checked

19. Which are NOT a step in the OAuth 2 0 authorization code grant process? Select all that are correct

generate an authorization code

generate an access token

verify the device ID

validate the client API key

obtain the end user’s consent for the application to request the user’s protected resources

validate the developer name

20. Which protocols are supported by the Message Logging policy? Select all that are correct

FTP

HTTP

SCP

TCP

UDP

Apigee API Engineer Exam Questions – Google Cloud – Apigee Certified API Engineer

Leave a Reply Cancel reply