MuleSoft Certified Developer Level 2 Exam (Latest 2024/ 2025 Update) Questions and Verified Answers |100% Correct| Grade A
MuleSoft Certified Developer Level 2 Exam
(Latest 2024/ 2025 Update) Questions and
Verified Answers |100% Correct| Grade A
Q: An HTTPS-based web app is being built and the TLS context must be configured. Which
keystores are supported by Mulesoft?
Answer:
JCEKS, PKCS12, JKS
Q: At minimum, what is required in the client-side keystore in order to enable mTLS?
Answer:
A matching private key and self-signed certificate
Q: Can clear-text and encrypted properties be defined in the same properties file?
Answer:
Yes; encrypted properties just require the secure prefix.
Q: Do property files containing encrypted properties have to have their filename end with “-
secure.yaml” or “-secure.properties”?
Answer:
It is best practice, but not required.
Q: A Mule app uses the Web Service Consumer module’s Consume operation to invoke an
external SOAP request. During development, what should the developer do to view the request
and response traffic to and from the SOAP service?
Answer:
Set an async logger for org.mule.service.http.impl.service.HttpMessageLogger to log at DEBUG
level in the log4j2.xml file.
Q: Does the Validation connector by default throw an error when a validation fails?
Answer:
Yes
Q: What widgets can be added to a custom dashboard in Anypoint Monitoring?
Answer:
Graph, Singlestat, Table, and Text
Q: What is the results if a non-text-based payload is uploaded to Anypoint MQ?
Answer:
Anypoint MQ converts it to a string before sending it to the MQ
Q: A Mule application is configured to dynamically accept the package name it needs to log, as
well as the package’s level, during application startup. What two steps are required to make these
actions happen?
Answer:
Set in the log4j2.xml file’s scope; and
start the Mule server with command-line arguments -Dlog.package=org.mule.runtime.logging
and -Dlog.level=INFO
Q: What is the preferred naming convention for XML SDK operation names?
Answer:
kebab-case
Q: What is Anypoint API Functional Monitoring?
Answer:
allows you to automate test scripts running against APIs
Q: Do XML SDK custom errors require a mapping element or just a definition?
Answer:
Both
Q: Does Scatter-Gather support transactions?
Answer:
Yes, but the paths aren’t run simultaneously.
Q: When the HTTP Requester receives a Remotely Closed error, which HTTP methods are
retried three times by default?
Answer:
GET, DELETE
Q: What are the two main phases of the OAuth 2.0 Authorization Code Grant Type flow?
Powered by https://learnexams.com/search/study?query=
Are VM queues or JMS topics only available within a Mule app? VM queues can only be used internally, though JMS topics can be used externally.
Where do you configure 2-way TLS for SOAP WSC? Transport tab of WSC
How do you support TLS in a Mule app listener? Add a TLS context to the HTTPS listener with mandatory keystore and optional truststore.
How do you support 2-way TLS in a Mule app listener? Add a TLS context to the HTTPS listener with mandatory keystore and mandatory truststore.
What does Mule do with respect to correlation IDs when a client application invokes a Mule API? “Mule will look for a header with the key “”X-Mule-Correlation-ID””. If none is found, it will automatically generate a random correlation ID.”
What is the correct ordering of the log4j levels from most to least verbose? DEBUG, INFO, WARN, ERROR, FATAL, OFF
An HTTPS-based web app is being built and the TLS context must be configured. Which keystores are supported by Mulesoft? JCEKS, PKCS12, JKS
At minimum, what is required in the client-side keystore in order to enable mTLS? A matching private key and self-signed certificate
Can clear-text and encrypted properties be defined in the same properties file? Yes; encrypted properties just require the secure prefix.
“Do property files containing encrypted properties have to have their filename end with “”-secure.yaml”” or “”-secure.properties””?” It is best practice, but not required.
A Mule app uses the Web Service Consumer module’s Consume operation to invoke an external SOAP request. During development, what should the developer do to view the request and response traffic to and from the SOAP service? Set an async logger for org.mule.service.http.impl.service.HttpMessageLogger to log at DEBUG level in the log4j2.xml file.
Does the Validation connector by default throw an error when a validation fails? Yes
What widgets can be added to a custom dashboard in Anypoint Monitoring? Graph, Singlestat, Table, and Text
What is the results if a non-text-based payload is uploaded to Anypoint MQ? Anypoint MQ converts it to a string before sending it to the MQ
A Mule application is configured to dynamically accept the package name it needs to log, as well as the package’s level, during application startup. What two steps are required to make these actions happen? “Set in the log4j2.xml file’s scope; and start the Mule server with command-line arguments -Dlog.package=org.mule.runtime.logging and -Dlog.level=INFO”
What is the preferred naming convention for XML SDK operation names? kebab-case
What is Anypoint API Functional Monitoring? allows you to automate test scripts running against APIs
Do XML SDK custom errors require a mapping element or just a definition? Both
Does Scatter-Gather support transactions? Yes, but the paths aren’t run simultaneously.
When the HTTP Requester receives a Remotely Closed error, which HTTP methods are retried three times by default? GET, DELETE
What are the two main phases of the OAuth 2.0 Authorization Code Grant Type flow? Authorization Code Flow and Exchange Authorization Code for Access Token Flow
How do you represent a null value in DataWeave? MunitTools::nullValue()
Does CloudHub normally use a project’s log4j2.xml file? No
What is the purpose of the server configuration element of the cloudhubDeployment config in the Mule Maven plugin? To associate a Maven server from settings.xml so the correct username/password can be used for deployment.
A common error handler needs to be reused across multiple Mule projects. Which component is best suited for this task? a library-style Mule plugin
A custom logger Mule XML SDK module is being developed to log the current payload in a particular format. Which code syntax is required to automatically accept the payload as a parameter to an XML SDK operation? “”
What regulates API request traffic by limiting the number of messages processed by an API and ensures that the number of messages processed within a specified time, regardless of client, does not exceed the configured limit? Spike Control policy
Is Maven’s settings.xml file project-specific? No
“A developer has created a custom policy with version “”1.0.0-SNAPSHOT””. The developer attempts to publish the policy to Exchange using the Exchange Maven Facade API version 3 and then apply the policy in API Manager. What will happen?” The policy will not successfully deploy to Exchange.
What configuration of the Scatter-Gather router executes routes in a sequential manner? Set the maxConcurrency of the Scatter-Gather to 1.
What must be configured in order to use API Autodiscovery in a deployed application? Add to API ID to AAD config in Studio, then add environment client ID and client secret in environment credentials in Studio.
A Mule application makes HTTPS requests to an external API that uses a certificate signed by a public Certificate Authority already in the JDK truststore. Two-way authentication is required for this invocation. What needs to be configured on the client side to enable the Mule application? a TLS context with a keystore
API Manager is set up to manage an API from Anypoint Exchange. A Mule application implements the API. What role does Autodiscovery play in this API? It links the API ID in API Manager with implementation to download and enforce policies.
An MUnit test case defines an expression that asserts true equals true. What assert expression makes that test case pass? “”
What security schemes are supported by HTTP Connector? Basic Authentication, OAuth 2.0 Client Credentials, OAuth 2.0 Authorization Code, Pass Through, and Digest Authentication
A company has deployed an Orders system API to a Cloudhub 2.0 shared space and made it accessible via the default ingress. What action (if any) is required to implement HTTP mTLS authentication for this API? No action is required; a CloudHub shared space does not support mTLS authentication.
Multiple individual Mule applications inherit a parent pom file, which in turn inherits a BOM parent pom file. Some applications use the Database module verison 1.0.0, whereas other application do not need the dependency at all. Where should this dependency be configured so that all projects that want to inherit the database dependency inherit the same version of it? in dependencyManagement in the BOM parent pom file
“A scheduled batch processing Mule application interacting with multiple other Mule applications over HTTP must send a custom correlation ID in the format of “”application name””-UUID to each application. What is required to configure the client application to send this custom correlation ID?” Set a value for HTTP header x-correlation-id with each request with the value: #[‘x-correlation-id’:myapp-$(uuid())’]
A call to an external API is wrapped in a Cache scope that uses an Object Store to store the response data. This Object Store data must not be accessible or manipulated by other connectors within the same application. Which Object Store configuration supports this requirement? Define a nested private Object Store within the Cache scope
Which fault tolerance mechanism can be used to protect against an HTTP API that routinely fails with an HTTP 502 status code? Use the First Successful router configured with a fallback API route that can be used in the event the primary API fails.
How are API Manager policies implemented in the Mule Runtime Engine? The Anypoint Runtime Manager Agent within the Mule Runtime Engine’s Orchestration Layer (API Gateway).
What are the two layers of the Mule Runtime Engine? Orchestration (API Gateway) and Implementation (Mule/non-Mule backend API)
What elements does a digital certificate have? A public key, certificate authority idenitification, and user/server information.
What is the difference between TLS and mTLS? In both, the client validates the server’s certificates. In only mTLS does the server validate the client certificates.
Is a client truststore optional in one-way TLS? What about mTLS? It is optional in both.
What is different in mTLS compared to TLS as it pertains to truststores and keystores? In TLS, the client has a keystore and optional truststore. In mTLS, the server also has a keystore and optional truststore.
What is the difference between a CloudHub Shared Load Balancer vs. a Dedicated Load Balancer? A Dedicated Load Balancer can have more than one Shared Load Balancer within an Anypoint Virtual Private Cloud.
What does the Validate Maven phase do? The first phase, it validates the project is correct and all necessary information is available.
What does the Compile Maven phase do? The second phase, it compiles the source code of the project.
What does the Test Maven phase do? The third phase, it tests the compiled source code using a suitable unit testing framework. These tests should not require the code be packaged or deployed.
What does the Package Maven phase do? The fourth phase, it takes the compiled code and packages it in its distributable format, such as a JAR.
What does the Verify Maven phase do? The fifth phase, it runs any checks on results of integration tests to ensure quality criteria are met.
What does the Install Maven phase do? The sixth phase, it installs the package into the local repository, for use as a dependency in other projects locally.
What does the Deploy Maven phase do? The seventh and final phase, it (done in the build environment) copies the final package to the remote repository for sharing with other developers and projects.
What does REST Connect do? It turns API specifications from Exchange into REST HTTP Connectors.
Can you get a REST Connect connector’s examples from the specification’s examples? No
In the OAuth Authorization Code Grant Type Flow, how does the client get an AUTH CODE? The Authorization Server sends the AUTH CODE after the User has authenticated himself with the Authorization Server.
In the OAuth Authorization Code Grant Type Flow, how does the client get an ACCESS_TOKEN? The client receives the ACCESS_TOKEN after sending the Authorization Server it’s AUTH CODE, client ID, and client Secret.
What is the main difference between Anypoint Object Store V2 and CloudHub Object Store V1? Anypoint Object Store V2 has larger limits and only supports Mule 4.
What is the main difference between Anypoint Object Store V2/CloudHub Object Store V1 and Mule Object Store? Mule Object Store is on-premises.
What is the difference between VM transient queues and persistent queues? Persistent queues are slower, but transient queues are lost in the case of an app crash.
What needs configured in order to use Anypoint MQ queues? URL, client ID, and client secret
What are the Maven phases in order? validate, compile, test, package, verify, install, deploy
What is a DLQ? It is a queue that only receives undelivered messages.
In order to approve/reject API access requests, you must have what permission(s)? “””Organization Administrator””, “”API Manager Environment Administrator””, or “”Manage Contracts”””
What does a liveness health check endpoint do? checks that endpoint is deployed and responds to simple HTTP calls
What does a readiness health check endpoint do? Checks liveness of downstream dependencies to route real traffic
How do you consume a SOAP web service in Mule? Add WSC connector module to application pom and add WSDL to connector configuration.
How do you consume a SOAP web service with TLS? Add TLS configuration to WSC connector pom configuration.
Can you configure custom API policies to execute before automated policies? No
Do projects inherit every module listed under dependencies in the pom/parent pom file? Yes
Do projects automatically inherit every module listed under dependencyManagement in the BOM parent pom file? No, only when they are also in the pom/parent pom dependencies.
What is the purpose of APIkit Router? It routes requests from a deployed API specification to the appropriate flow after validating the request matches the specification interface.
How would we parameterize a configuration file in global.xml? “Define the “”configuration-properties”” tag’s “”file”” attribute as equal to the parameterized configuration file name (e.g. “”properties-${env}.yaml””)”
What XML tag in global.xml do you use to add a secure config file? “”
What function decrypts a secure property within a Mule app? Use the example of the tls.keystore.keyPassword property. “””${secure::tls.keystore.keyPassword}”””
“How do you define the encrypted part of a secure property? Use the example of a property named “”password””.” “password: “”![encrypted string]””(you enclose the encrypted portion with “”![]””)”
Where do you list file extensions to exclude from Mule filtering? In pom.xml in the Maven plugin’s nonFilteredFileExtensions configuration e.g.p12crtpem
Where do you configuring resource filtering for main/resources? In pom.xml undersrc/main/resourcestrue
What is Maven resource filtering? It gives project files access to properties defined in pom.xml’s scope.
Should plugin configurations go in the parent pom or BOM? parent pom
Should the plugin and dependency versions be configured in the parent pom or BOM? BOM
If a Scatter-Gather route times out, what error is raised? MULE:TIMEOUT
If a Scatter-Gather route fails, what error is raised? MULE:COMPOSITE_ERROR
What error types does the Validation module raise? VALIDATION:*
What module validates XML schema? “”
What module validates JSON schema? “(quotes examples include “”http://my.site/schemas/fstab.json””, “”fstab.json””, or “”resource://fstab.json””)”
What error is raised if a JSON schema validation fails? JSON:SCHEMA_NOT_HONORED
“When creating a shared library, what should the common logic application’s pom.xml “”packaging”” type be?” “””mule-application”””
When creating a shared library, what should the common logic application’s pom.xml Maven configuration classifier be? “””mule-plugin”””
When creating a shared library, what should the common logic application’s pom.xml required dependencies’ scopes be? “””provided”””
What is Mule XML SDK’s biggest limitation when it come to it’s capabilities compared to Java application? Mule XML SDK can only provide outbound operations, not sources (such as a ) or routers.
What are logging Appenders? They define where the logging is recorded.
Are Mule’s default loggers asynchronous or synchronous? Asynchronous
What’s the difference between asynchronous and synchronous loggers? Asynchronous logging messages are faster (executing in a thread separate from the app), but may be lost in a crash.
Are logging messages of level ERROR logged in a Mule app with the default configuration? Yes
Are logging messages of level DEBUG or TRACE logged in a Mule app with the default configuration? No
Scenario: A request is received, and crosses other policies before reaching the HTTP Caching policy. It is a cache hit scenario, the HTTP Caching policy searches for the key in the object store and finds that the response to a request is already cached as a stored entry. Does the request proceed any further in the policy chain? No, the request does not proceed any further in the policy chain toward the backend.
What does the flowRef attribute of an API Autodiscovery config reference? the flow that you want to pair to the API in API Manager
What is the significance of the element in a policy’s xml? Mule Event operations defined after the element will be executed after the referenced flow completes.
How would you convert a JKS keystore to PKCS12? keytool -importkeystore -srckeystore keystore.jks -destkeystore exported.p12 -deststoretype PKCS12
Policies consist of what two files? a deployable JAR file that contains the policy implementation, and a YAML Configuration File where the policy parameters and metadata are defined.
To package a policy in Maven, the development project must be composed of what following files? An XML template that contains the implementation of the policy using Mule’s XML schema language, a YAML file that defines the configurable parameters of the policy (Anypoint API Manager uses this file to render the UI to display inputs for the policy), the template’s pom.xml filethat defines policy dependencies (the packaging type needs to be mule-policy, and the pom.xml file may define any other Maven plugin that helps to manage the development lifecycle of the Maven project), Resources (optional files that the policy depends on, such as certificates and configuration properties files), and the mule-artifact.json descriptor.
What is the purpose of a Circuit Breaker? It is used to detect failures and encapsulates the logic of preventing a failure from constantly recurring, when the external service is not available or external system is down for maintenance. It also uses a retry pattern to retry the message at defined interval to process the message successfully.
What is a Anypoint MQ circuit breaker open state? The Subscriber source doesn’t attempt to retrieve messages and skips the message silently until the configured trip timeout occurred.
What is a Anypoint MQ circuit breaker closed state? The starting state where the Subscriber source retrieves messages normally from MQ based on its configuration
What is a Anypoint MQ circuit breaker half-open state? After trip timeout elapses, the Subscriber source goes to a Half-Open state. In the next poll for messages, the Subscriber source retrieves a single message from the service and uses that message to check if the system has recovered before going back to the normal Closed state.