Apigee-API-Engineer 試験問題を無料オンラインアクセス

You are adding a filter on an API to locate all orders in a specific date range You want to use a RESTful design Which design should you use?

• A.GET/orders'?from-date=2016-01-01&to-date=2016-02-01
• B.GET /customers/{customer-id}/orders'?from-date=2016-01-01&to-date^2016-02-01
• C.GET/getOrdersBetweenDates/2016-01-01/2016-02-01
• D.POST /searchorders with a post-body of from-date-2016-01-01&to-date=2016-02-01

Which policy can be used to restrict access to API resources based on the client IP?

• A.Regular Expression Protection policy
• B.Access Control policy
• C.Basic Authentication policy
• D.Raise Fault policy

Which feature can be used to automatically distribute traffic across multiple target servers'?

• A.use RouteRules with multiple TargetEndpoints
• B.use a concurrent rate limiting policy
• C.use an AssignMessage policy
• D.use a LoadBalancer entry in the HTTPTargelConnection session

What is the purpose of a refresh token?

• A.To extend the amount of time an existing access token can be used by resetting the token's expiration time
• B.To notify the application that a new access token is required.
• C.To reset an application to its default configuration.
• D.To request that Apigee re-issue a new access token to replace an expired access token.

Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
Choose 2 answers

• A.Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties
• B.Verify the signature of the JWT using a shared secret.
• C.Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties
• D.Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters
• E.Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid