[Nov 04, 2025] Pass Apigee-API-Engineer Review Guide, Reliable Apigee-API-Engineer Test Engine
Apigee-API-Engineer Test Engine Practice Test Questions, Exam Dumps
NEW QUESTION # 54
You have a new set of requirements for a mobile app. The product team has asked for the following.
* The app requires access to customer order information
* The app needs to allow a search function for orders by product name
Choose two development tasks that would accomplish the requirements.
- A. The design should include a new custom header X-Product-Name
- B. The Apigee proxy should allow a query parameter for q=
- C. Create a new API proxy for a GET /v1/customers/{customerid}/orders
- D. Create a new API proxy for a GET /v1/customers/{customerid}/products/{productname}
- E. The Apigee proxy should allow a query parameter for orderld=
Answer: B,E
NEW QUESTION # 55
You have a requirement to expose functions and data from an existing back-end system Using Apigee recommended practices, which step should you take first*?
- A. Write business and functional requirements documents.
- B. Work with the existing or targeted application consumers to build an Open API Specification model
- C. Implement ad-hoc microservices using a managed container system.
- D. Catalog the data model of the backing data store or API into a data dictionary
Answer: C
NEW QUESTION # 56
Which is a benefit of three-legged OAuth (authonzation_code grant)'?
- A. provides access to user-specific resources without exposing end-user credentials to the client application
- B. authorization codes can be used multiple times to obtain access tokens
- C. allows another individual to access a user's private data
- D. provides end-user credentials to requesting app
Answer: D
NEW QUESTION # 57
Which OAuth 2 0 grant requires redirection'?
- A. Client Credentials
- B. Resource Owner Password Credentials
- C. Authorization Code
- D. Refresh Token
Answer: C
NEW QUESTION # 58
You are generating tokens depending on a partner's service level at runtime You need to control access token expiration What should you do?
- A. Store and fetch access token expiration times from a configuration file to use at run time
- B. Pass access token expiration values as a request query parameter
- C. Store and fetch expiration value from Key Value Maps at runtime to use for access token creation.
- D. Add expiration times in product custom attributes for retrieval at run time
Answer: C
NEW QUESTION # 59
You are implementing several flows in Apigee Edge and realize that there is common functionality used across many different APIs and flows You want to use Apigee Edge to minimize the number of releases What should you do?
- A. Use Proxy Chaining and a Service Callout where needed
- B. Use a template build process to compose flows from flow fragments.
- C. Use a Shared Flow and Flow Hooks to enforce all APIs call the shared flow
- D. Use a Shared Flow and a Flow Callout where needed.
Answer: D
NEW QUESTION # 60
Which policy can be used to see if a SOAP request matches a provided WSDL?
- A. XMLThreatProtection
- B. XMLValidation
- C. MessageValidation
- D. AccessControl
Answer: A
NEW QUESTION # 61
Which are NOT a step in the OAuth 2 0 authorization code grant process?
- A. generate an access token
- B. validate the developer name
- C. obtain the end user's consent for the application to request the user's protected resources
- D. generate an authorization code
- E. validate the client API key
- F. verify the device ID
Answer: B,C,D
NEW QUESTION # 62
Which feature can be used to automatically distribute traffic across multiple target servers'?
- A. use RouteRules with multiple TargetEndpoints
- B. use a concurrent rate limiting policy
- C. use an AssignMessage policy
- D. use a LoadBalancer entry in the HTTPTargelConnection session
Answer: B
NEW QUESTION # 63
You have a requirement to expose functions and data from an existing back-end system Using Apigee recommended practices, which step should you take first*?
- A. Write business and functional requirements documents.
- B. Implement ad-hoc microservices using a managed container system.
- C. Work with the existing or targeted application consumers to build an Open API Specification model
- D. Catalog the data model of the backing data store or API into a data dictionary
Answer: C
NEW QUESTION # 64
Which statements are true for configuring the Edge Microgateway quota plugin? Choose 3 answers
- A. Quota plugin must execute after the quota-memory Plugin execution
- B. Quota plugin requires quota-memory plugin to be installed and enabled
- C. Quota plugin requires OAuth Plugin to be installed and enabled
- D. Quotas are only enforced when client authentication is enabled
- E. Quota plugin must execute after the OAuth Plugin execution
Answer: B,C,D
NEW QUESTION # 65
Which JavaScript statement can be used to raise a fault from a JavaScript policy named "Weather"?
- A. return-1;
- B. throw "Bad Data",
- C. return false;
- D. contextsetVariablefWeather.Fauir, "true*);
Answer: D
NEW QUESTION # 66
As an API Engineer you have been asked to automate the build process for Apigee deployments. You decide to build a new tool to deploy the API Bundles using the Apigee Management API. What would be the correct approach?
- A. You should deploy an Apigee microgateway
- B. Management APIs should be called directly from the tool to the Apigee gateway
- C. Management APIs need a separate API product for security reasons.
- D. Each management API you plan to use should be turned into an Apigee Proxy.
Answer: B
NEW QUESTION # 67
What capabilities are provided when using the apigee-access node js module? Select all that apply
- A. XML and JSON conversions
- B. Object caching
- C. Analytics Storage
- D. Edge flow variable access
Answer: B,D
NEW QUESTION # 68
You need to access API back-end systems authorized by a machine user credential Each API call must connect to the API back-end system with unique credentials You need to keep user credential info securely protected How should you store the credential?
- A. Stored in configuration files and make use at run time.
- B. Stored in encrypted Key-Value Maps and access at run time.
- C. Hardcoded in Assign Message policy
- D. Stored in Key-Value Maps and accessed at run time.
Answer: B
NEW QUESTION # 69
What does the variable "message.content" represent?
- A. neither the request content nor the response content
- B. the request content in the request flow
- C. the request content when in the request flow and the response content when in the response flow
- D. the response content in the response flow
Answer: C
NEW QUESTION # 70
Which policy can be used to restrict access to API resources based on the client IP?
- A. Regular Expression Protection policy
- B. Access Control policy
- C. Raise Fault policy
- D. Basic Authentication policy
Answer: C
NEW QUESTION # 71
You have a new set of requirements for a mobile app. The product team tells you that the user data already exists from the website version of the app. The user APIs are currently internal access only. The product team has asked for the following.
* The app requires user authentication before data should be accessed.
* The app needs to display user data once the user has logged into the mobile app.
* The app needs to allow changes to user data once the user has logged into the mobile app.
Choose three development tasks that would accomplish the requirements. Choose 3 answers
- A. Create an Oauth 2.0 Password Grant Type API proxy
- B. Create a new API proxy for a POST /v1/customers/{customerid}
- C. Create a new API proxy for a DELETE/v1/customers/{customerid}
- D. Create a new API proxy for a GET /v1/customers/{customerid}
- E. Create an Oauth 2.0 Client Credential Flow Grant Type API proxy
- F. Create an Oauth 2 0 Service Account API proxy
- G. Create a new API proxy for a PUT/v1/customers/{customerid}
Answer: B,E,F
NEW QUESTION # 72
You have a single back end that needs to be exposed to customers using different API request and response payloads You need to allow these different request types without breaking existing implementations What should you do?
- A. Create a new proxy xml and base path with upgraded version and invoke backend target system with required parameters
- B. Include a new customer requirement in an existing API proxy and invoke backend target system with required parameters.
- C. Create a new API proxy for new customers and invoke backend target system with required parameters.
- D. Configure the API as a pass-through proxy and invoke backend target system with client request parameters.
Answer: A
NEW QUESTION # 73
Where can you use a Flow Callout policy? Select all that apply.
- A. Only in ProxyEndpoint PreFlow or TargetEndpoint PostFlow
- B. Anywhere in a ProxyEndpoint or TargetEndpoint except PostClientFlow
- C. In a Shared Flow
- D. Anywhere except another Shared Flow
- E. Only in the Flow phase of ProxyEndpoint or TargetEndpoint
Answer: A
NEW QUESTION # 74
What is the purpose of a refresh token?
- A. To reset an application to its default configuration.
- B. To notify the application that a new access token is required.
- C. To extend the amount of time an existing access token can be used by resetting the token's expiration time
- D. To request that Apigee re-issue a new access token to replace an expired access token.
Answer: D
NEW QUESTION # 75
Your team has the following requirements in building an API:
* Adhere to Pragmatic REST.
* Model the API to the consumption use case.
* Require API Key authentication
* Implement CORS
* Validate inputs.
You have begun migrating a SOAP-based web service to a REST API by using the SOAP to REST function in Apigee Edge Which two of the above-listed requirements could be satisfied by this action?
- A. Model the API to the consumption use case
- B. Require API Key authentication
- C. Implement CORS.
- D. Validate inputs.
- E. Adhere to Pragmatic REST
Answer: A,B
NEW QUESTION # 76
As an API Engineer you are approached late in the day with an emergency request to configure a 2 way TLS connection between Apigee and the backend server. All existing certificates have been revoked. The security team provides you the PEM file for the backend server and your new Apigee TLS certificate. What minimum steps are required to reconfigure 2-way TLS?
- A. Add the backend certificate chain to the trust store
- B. Add your Apigee TLS certificate to the key store.
- C. Use the KVM to store the contents of the PEM file.
- D. Add the backend servers PEM file to the key store.
- E. Add the backend servers PEM file to the trust store.
- F. Use the Access Control Policy to reference the PEM file
Answer: C,D
NEW QUESTION # 77
Which describe the ResponseCache' policy in Apigee Edge?
- A. Should be attached to both Request and Response Flow
- B. Helps to reduce the response latency
- C. Helps to reduce the amount of load to the target system.
- D. Caches both the request and the response
Answer: A
NEW QUESTION # 78
......
100% Free Apigee-API-Engineer Daily Practice Exam With 128 Questions: https://www.itcertmagic.com/Google/real-Apigee-API-Engineer-exam-prep-dumps.html
Apigee-API-Engineer exam torrent Google study guide: https://drive.google.com/open?id=12i2rHIVpVZL4aspJDbVA1TxPNMoHOUzb