An organization has an HTTPS-enabled Mule application named Orders API that receives requests from another Mule application named Process Orders.
The communication between these two Mule applications must be secured by TLS mutual authentication (two-way TLS).
At a minimum, what must be stored in each truststore and keystore of these two Mule applications to properly support two-way TLS between the two Mule applications while properly protecting each Mule application's keys?
Suggested Answer: C
Get Premium Salesforce Certified MuleSoft Platform Integration Architect (Mule-Arch-202) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
AL
Alyce
2 days ago
C has everything needed for mutual authentication.
KA
Kara
8 days ago
I’m leaning towards A, but it feels incomplete.
JA
James
13 days ago
C ensures both applications trust each other properly.
BE
Berry
18 days ago
Option D seems right too, but I prefer C for clarity.
MA
Margot
23 days ago
Agreed! Two-way TLS needs both public and private keys.
CO
Colette
28 days ago
I think option C is the best. It covers all keys needed.
CA
Cathern
1 month ago
C is definitely the most comprehensive. I feel confident with that choice.
LI
Lisbeth
1 month ago
D is straightforward, but I worry about missing keys in A.
KA
Karrie
1 month ago
C has everything needed for mutual authentication. Can't go wrong with that.
JA
James
2 months ago
I’m leaning towards A. It’s simpler, but might miss some security.
AN
Angelo
2 months ago
Option D looks good too. But I feel C is more secure.
TY
Tyisha
2 months ago
I agree, C seems complete. Both applications need to trust each other.
YU
Yun
2 months ago
I think option C is the best. It covers all bases for two-way TLS.
ME
Melina
2 months ago
I’m surprised this is even a question, it’s pretty basic TLS stuff!
AS
Ashton
2 months ago
Definitely not A, that one misses key elements!
OL
Ollie
3 months ago
Wait, why do we need both public and private keys in the truststore?
ST
Steffanie
3 months ago
I think D is the right choice, it just feels more complete.
TA
Tambra
3 months ago
Option C seems correct, covers all the keys needed.
RE
Ressie
3 months ago
I feel like option D could also be correct, but I can't recall if the truststore needs the private key. I need to double-check my notes on that.
AI
Aileen
3 months ago
I’m a bit confused about the difference between the keystore and truststore requirements. I thought both needed to have the public key of the other application.
CH
Chauncey
4 months ago
This question seems similar to the practice exam we did on TLS configurations. I think option C might be the right choice since it mentions both keystores and truststores.
DU
Dudley
4 months ago
I remember we discussed that the truststore should contain the public keys of the other party, but I'm not sure if it should also include the private key.
SH
Sheridan
4 months ago
I feel like option C makes the most sense since it mentions both truststores and keystores for each application, but I’m a bit confused about the specifics.
SI
Sina
5 months ago
I practiced a question like this where the truststore had to include the public key of the other application, but I can't recall if the private key should also be in the keystore.
BO
Bong
6 months ago
I’m not entirely sure, but I think the keystore should contain the private key of the application, right? That seems to be a common requirement in similar questions.
CR
Cristal
6 months ago
I remember that for two-way TLS, each application needs to trust the other, so they must have each other's public keys in their truststores.