MENU
An organization wants to make sure only known partners can invoke the organization's APIs. To achieve this security goal, the organization wants to enforce a Client ID Enforcement policy in API Manager so that only registered partner applications can invoke the organization's APIs. In what type of API implementation does MuleSoft recommend adding an API proxy to enforce the Client ID Enforcement policy, rather than embedding the policy directly in the application's JVM?
Suggested Answer: D
Get Premium Salesforce Certified MuleSoft Platform Architect (Mule-Arch-201) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Correct Answe r: A Non-Mule application
*****************************************
>> All type of Mule applications (Mule 3/ Mule 4/ with APIkit/ with Custom Java Code etc) running on Mule Runtimes support the Embedded Policy Enforcement on them.
>> The only option that cannot have or does not support embedded policy enforcement and must have API Proxy is for Non-Mule Applications.
So, Non-Mule application is the right answer.
29 comments · newest first
AL
Alesia
6 months ago
I feel like A is too outdated. We need to focus on Mule 4 for better security.
MA
Malcom
6 months ago
Not so sure about C. What about D? Non-Mule apps could be simpler.
JE
Jean
6 months ago
I agree, C makes sense. Easier to manage security that way.
RU
Rutha
6 months ago
I think it's C. Mule 4 with API spec is the way to go.
EL
Eleonore
6 months ago
Surprised this isn't more straightforward!
KA
Karima
6 months ago
D is definitely not the right choice.
NE
Nelida
7 months ago
Wait, why not just use A? Seems easier.
SH
Sherita
7 months ago
Yeah, I agree with C! Makes the most sense.
RE
Reyes
7 months ago
I think it's C, Mule 4 with an API spec.
JU
Junita
7 months ago
Haha, I bet the developers at MuleSoft are like, "Just use the API proxy, it's the easiest way!"
AL
Albina
7 months ago
C is the way to go. Who wants to mess with custom Java code when you can use an API specification?
GL
Glory
8 months ago
I'm going with B. Modifying the Mule 3 or Mule 4 application with custom Java code could also work.
CH
Chaya
8 months ago
Definitely C. Embedding the policy directly in the application's JVM seems like a bad idea.
SH
Sharen
8 months ago
I think the answer is C. A Mule 4 application with an API specification makes the most sense for enforcing the Client ID Enforcement policy.
TH
Thaddeus
8 months ago
I recall that using an API proxy is generally recommended for non-Mule applications, but I can't remember if that applies here. Maybe option D?
FA
Fabiola
9 months ago
I’m a bit confused about the differences between Mule 3 and Mule 4 applications in this context. Does it really matter which version we choose?
LE
Lenora
9 months ago
I practiced a similar question where we had to decide on API proxies versus embedding policies. I feel like it might be related to option C.
KE
Kerry
9 months ago
I think I remember something about API proxies being more flexible for security policies, but I'm not sure which option fits that best.
EL
Eladia
9 months ago
I've got a strategy - I'll carefully read through each answer option and think about the tradeoffs of the different API implementation types. That should help me identify the one where MuleSoft recommends using a proxy.
YU
Yuette
9 months ago
Based on my understanding, the proxy approach is recommended when you want to centralize the enforcement of the policy, rather than having it distributed across multiple applications. I think that's the key distinction here.
NI
Nickolas
10 months ago
I'm a bit confused by the wording of the question. What's the difference between embedding the policy directly in the application's JVM and using an API proxy? I'll need to review that concept.
LO
Louvenia
10 months ago
Okay, let me see. The question is asking about the type of API implementation where we should use a proxy to enforce the Client ID Enforcement policy. I think I need to consider the differences between the Mule 3, Mule 4, and non-Mule options.
DE
Deonna
10 months ago
Hmm, this seems like a security-related question. I'll need to think carefully about the different API implementation types and where MuleSoft recommends adding the proxy.
NI
Nicolette
3 months ago
I’d stick with the API proxy for better management.
DU
Dulce
3 months ago
True, but what about the custom Java code option?
AR
Arlette
4 months ago
That makes sense! API proxies are crucial for security.
RO
Romana
4 months ago
I believe it’s more about the Mule 4 application with an API spec.
EN
Enola
4 months ago
Yeah, but which Mule version are we talking about?
JE
Jess
5 months ago
I think it’s definitely about the API proxy.