Salesforce Certified MuleSoft Platform Integration Architect (Mule-Arch-202) Exam - Topic 2 Question 9 Discussion

Actual exam question for Salesforce's Salesforce Certified MuleSoft Platform Integration Architect (Mule-Arch-202) exam

Question #: 9
Topic #: 2

[All Salesforce Certified MuleSoft Platform Integration Architect (Mule-Arch-202) Questions]

An organization has an HTTPS-enabled Mule application named Orders API that receives requests from another Mule application named Process Orders.

The communication between these two Mule applications must be secured by TLS mutual authentication (two-way TLS).

At a minimum, what must be stored in each truststore and keystore of these two Mule applications to properly support two-way TLS between the two Mule applications while properly protecting each Mule application's keys?

AOrders API truststore: The Orders API public key
Process Orders keystore: The Process Orders private key and public key

BOrders API truststore: The Orders API private key and public key
Process Orders keystore: The Process Orders private key public key

COrders API truststore: The Process Orders public key
Orders API keystore: The Orders API private key and public key
Process Orders truststore: The Orders API public key
Process Orders keystore: The Process Orders private key and public key

DOrders API truststore: The Process Orders public key
Orders API keystore: The Orders API private key
Process Orders truststore: The Orders API public key
Process Orders keystore: The Process Orders private key

Show Suggested Answer

Suggested Answer: A

by Graciela at Jul 02, 2024, 06:26 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified MuleSoft Platform Integration Architect (Mule-Arch-202) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marvel

3 months ago

I’m not sure about B, feels like it’s missing something important.

upvoted 0 times

...

Jesusa

3 months ago

Definitely need the Process Orders public key in the Orders API truststore!

upvoted 0 times

...

Shantell

3 months ago

Wait, why do we need both public and private keys in the truststore?

upvoted 0 times

...

Eura

4 months ago

I think D is the right choice, it looks more secure.

upvoted 0 times

...

Ling

4 months ago

Option C seems to cover all bases for two-way TLS.

upvoted 0 times

...

Merilyn

4 months ago

I’m a bit confused about the private and public keys. I thought the truststore only needed the public key, but I can't remember if the keystore should have both keys or just one.

upvoted 0 times

...

Stevie

4 months ago

I practiced a similar question, and I think the truststore should have the public key of the other application. So maybe option D is correct because it mentions both truststores and keystores.

upvoted 0 times

...

Charlie

4 months ago

I’m not entirely sure, but I think the keystore should contain the private key and public key of each application. It feels like option C might be right since it mentions both keystores and truststores.

upvoted 0 times

...

Desiree

5 months ago

I remember that for two-way TLS, each application needs to trust the other, so I think we need to have the public keys in the truststores.

upvoted 0 times

...

Annabelle

5 months ago

I'm feeling pretty confident about this one. The answer is C - the Orders API needs the Process Orders public key in its truststore, and the Process Orders needs the Orders API public key in its truststore. And each application needs to store its own private and public keys in its keystore.

upvoted 0 times

...

Vilma

5 months ago

Okay, I think I've got this. The key is that we need to properly protect the private keys of each application while still allowing the necessary public keys to be shared for mutual authentication.

upvoted 0 times

...

Lonna

5 months ago

Hmm, I'm a bit confused on the difference between the truststore and keystore and what needs to be stored in each. I'll need to review my notes on that.

upvoted 0 times

...

Precious

5 months ago

This looks like a tricky question on TLS mutual authentication. I'll need to carefully think through the requirements and the different options.

upvoted 0 times

...

Reta

5 months ago

Hmm, this looks like a tricky one. I'll need to think carefully about the guiding principles for creating value streams.

upvoted 0 times

...

Lizbeth

5 months ago

Hmm, I'm a bit confused by the wording here. It says the solution must "minimize administrative overhead", so I'm not sure if something like an Automation runbook is the best approach since that would require more setup. Maybe an Azure Monitor alert with a dynamic threshold would be a better fit?

upvoted 0 times

...

Alishia

5 months ago

Okay, I think I've got this. Based on my understanding, the Standard Return Authorization -- Cash form can be used to create a Cash Refund transaction, where the customer receives a refund in cash for the returned items. I'm pretty confident that's the right answer.

upvoted 0 times

...

Stefanie

10 months ago

Ah, the age-old question of 'which keys go where?' I guess the exam writers are really trying to keep us on our toes with this one. Maybe they should just ask us to juggle the keys instead - that would be a real test of our security skills!

upvoted 0 times

Chau

9 months ago

Process Orders keystore: The Process Orders private key and public key

upvoted 0 times

...

Stephaine

9 months ago

A) Orders API truststore: The Orders API public key

upvoted 0 times

...

Mozelle

10 months ago

C is the answer, no doubt. Though I'm curious if the exam will ask us to generate the keys or if they'll just give them to us. Either way, I'm ready to secure those Orders!

upvoted 0 times

Mari

8 months ago

Absolutely, we can't afford to take any chances when it comes to securing our communication channels.

upvoted 0 times

...

Tenesha

9 months ago

I'm glad we're on the same page. Security is key when it comes to handling orders in our applications.

upvoted 0 times

...

Charlene

9 months ago

I think we might have to generate the keys ourselves, but it's good to be prepared either way.

upvoted 0 times

...

An

9 months ago

I agree, C is the correct answer. We need to make sure the truststores and keystores are set up correctly for two-way TLS.

upvoted 0 times

...

Valentin

10 months ago

Option C is the way to go. The only thing missing is the password for the keystores. Hopefully, the exam will provide that information!

upvoted 0 times

Gladis

10 months ago

Yes, the password for the keystores is crucial for proper security measures.

upvoted 0 times

...

Jina

10 months ago

I agree, option C seems to be the correct configuration for two-way TLS.

upvoted 0 times

...

Jacqueline

10 months ago

I agree with Mabel. This is a standard setup for two-way TLS communication between two applications.

upvoted 0 times

...

Wendell

11 months ago

I'm not sure, but I think option D could also work because it has the Process Orders public key in the Orders API truststore.

upvoted 0 times

...

Mabel

11 months ago

Option C seems to be the correct answer. Each application needs to have the other's public key in its truststore, and its own private and public keys in its keystore.

upvoted 0 times