To convey the necessary non-functional requirement (NFR) related to protecting backend services from a high rate of requests according to SLAs, the following steps should be taken:

Create a Shared RAML Fragment: Develop a RAML fragment that defines the NFR, including the SLAs for different subscription levels ( " Gold " , " Silver " , " Platinum " ). This fragment should include the details on rate limiting and throttling based on the new parameter added to the Accounts object.

Update API Specifications: Integrate the shared RAML fragment into each API specification. This ensures that the NFR is consistently applied across all relevant APIs.

Publish to Exchange: Publish the updated API specifications and the shared RAML fragment to Anypoint Exchange. This makes the NFR visible and accessible to all stakeholders and developers, ensuring compliance and implementation consistency.

This approach ensures that the NFR is clearly communicated and applied uniformly across all API implementations.

References

MuleSoft Documentation on RAML and API Specifications

Best Practices for API Design and Documentation

Requirement Analysis: The security team requires any external API call to be restricted by an IP include list. This ensures that only specified IP addresses can access the third-party API.

Design Plan: To fulfill this requirement, implementing a proxy for the third-party API is the best approach. This proxy can enforce the IP include list policy.

Implementation Steps:

Create a Proxy API: Set up a new API proxy in Anypoint Platform to act as an intermediary for the third-party API.

Configure IP Include List Policy: Within the Anypoint API Manager, apply the IP whitelist policy to the proxy API. This policy will ensure that only requests from specified IP addresses are allowed to reach the third-party API.

Modify Main API Flow: Update the flow of your main API to call the newly created proxy API instead of directly calling the third-party API.

Testing: Conduct thorough testing to ensure that the proxy API correctly forwards requests to the third-party API only if the requests originate from IPs in the include list.

Advantages:

Security: This method ensures that only approved IPs can access the third-party API, adhering to the security team ' s requirements.

Manageability: Centralizes the IP restriction management within the API Manager, simplifying maintenance and updates.

References

MuleSoft Documentation on API Proxies

MuleSoft Documentation on IP Whitelist Policy

Explanation

Correct answer is VM VM support Transactional Type. When an exception occur, The transaction rolls back to its original state for reprocessing. This feature is not supported by other connectors.

Here is additional information about Transaction management:

Table Description automatically generated

Explanation

* Option B shouldn ' t be used unless extremely needed, if RAML is changed, client needs to accommodate changes. Question is about minimizing impact on Client. So this is not a valid choice.

* Option C isn ' t valid as Business can ' t stop for consumers acknowledgment.

* Option D again needs Client to accommodate changes and isn ' t viable option.

* Best choice is A where RAML definition isn ' t changed and underlined functionality is changed without any dependency on client and without impacting client.

The Publish/Subscriber Messaging Bus (Pub/Sub) model is well-suited for high-volume, real-time communication and notification requirements. In this scenario, the retailer needs to notify its order management, warehouse, and billing systems within 15 minutes of order submission. Pub/Sub messaging systems enable asynchronous communication where messages (orders) are published to a topic and multiple subscribers (order management, warehouse, billing systems) receive notifications simultaneously. This decouples the systems and ensures that each subscriber receives the message promptly for subsequent processing.

An Enterprise Architect would use a single enterprise-wide canonical data model (CDM) when designing an integration solution to achieve the following benefits:

Reduced Dependencies: By standardizing on a single data model, it simplifies the integration process between multiple systems that may use different data formats. This eliminates the need for numerous point-to-point transformations.

Consistency and Reusability: A CDM ensures consistent data representation across the enterprise, which promotes data integrity and reusability of integration components.

Simplified Maintenance: Having a single data model reduces the complexity of maintaining and updating integration solutions, as changes need to be made in only one place.

The CDM acts as an abstraction layer that decouples systems, facilitating easier integration and reducing the potential for errors.

References

MuleSoft Documentation on Canonical Data Models

Best Practices for Data Integration with MuleSoft

Explanation

* Shared load balancers don’t allow you to configure custom SSL certificates or proxy rules

* Dedicated Load Balancer are optional but you need to purchase them additionally if needed.

* TLS is a cryptographic protocol that provides communications security for your Mule app. TLS offers many different ways of exchanging keys for authentication, encrypting data, and guaranteeing message integrity.

* The CloudHub Shared Load Balancer terminates TLS connections and uses its own server-side certificate.

* Only a DLB allows the configuration of a custom TLS server certificate

* DLB enables you to define SSL configurations to provide custom certificates and optionally enforce two-way SSL client authentication.

* To use a DLB in your environment, you must first create an Anypoint VPC. Because you can associate multiple environments with the same Anypoint VPC, you can use the same dedicated load balancer for your different environments.

* MuleSoft Reference: https://docs.mulesoft.com/runtime-manager/dedicated-load-balancer-tutorial

Additional Info on SLB Vs DLB:

The File Transfer Protocol (FTP) uses the Transmission Control Protocol (TCP) for reliable communication. TCP is one of the core protocols of the Internet Protocol Suite and provides reliable, ordered, and error-checked delivery of a stream of data between applications running on hosts communicating via an IP network. FTP relies on TCP to ensure that all data packets are delivered accurately and in the correct sequence, which is essential for the reliable transfer of files between a client and server.

References

IETF RFC 959 - File Transfer Protocol (FTP)

TCP/IP Protocol Suite Documentation

To discover which API specifications have been created within the organization before starting a new project, a developer can use Anypoint Exchange. Anypoint Exchange is a centralized repository on the Anypoint Platform where developers can find, share, and collaborate on API specifications, connectors, templates, and other reusable assets.

In Anypoint Exchange, developers can browse the currently released API specifications, try them out using the built-in testing tools, and access documentation and other resources. This facilitates the reuse of existing APIs and ensures that the new project aligns with the organization ' s API strategy.

References

MuleSoft Documentation on Anypoint Exchange

Best Practices for API Reuse and Discovery

Explanation

Connected Apps

The Connected Apps feature provides a framework that enables an external application to integrate with Anypoint Platform using APIs through OAuth 2.0 and OpenID Connect. Connected apps help users delegate their access without sharing sensitive credentials or giving full control of their accounts to third parties. Actions taken by connected apps are audited, and users can also revoke access at any time. Note that some products do not currently include client IDs in this release of the Connected Apps feature. The Connected Apps feature enables you to use secure authentication protocols and control an app’s access to user data. Additionally, end users can authorize the app to access their Anypoint Platform data.

Mule Ref Doc : https://docs.mulesoft.com/access-management/connected-apps-overview