Explanation

CloudHub supports updating your applications at runtime so end users of your HTTP APIs experience zero downtime. While your application update is deploying, CloudHub keeps the old version of your application running. Your domain points to the old version of your application until the newly uploaded version is fully started. This allows you to keep servicing requests from your old application while the new version of your application is starting.

According to the MuleSoft Catalyst framework, an Integration Architect plays a crucial role in defining and achieving business outcomes. One of their key responsibilities is to agree upon Key Performance Indicators (KPIs) and help develop an overall success plan. This involves working with stakeholders to identify measurable goals and ensure that the integration initiatives align with the organization’s strategic objectives.

KPIs are critical for tracking progress, measuring success, and making data-driven decisions. By agreeing on KPIs and developing a success plan, the Integration Architect ensures that the organization can objectively measure the impact of its integration efforts and adjust strategies as needed to achieve desired business outcomes.

MuleSoft Catalyst Knowledge Hub

Explanation

We need to note few things about the scenario which will help us in reaching the correct solution.

Point 1 : The APIs are all publicly available and are associated with several mobile applications and web applications. This means Apply an IP blacklist policy is not viable option. as blacklisting IPs is limited to partial web traffic. It can ' t be useful for traffic from mobile application

Point 2 : The organization does NOT want to use any authentication or compliance policies for these APIs. This means we can not apply HTTPS mutual authentication scheme.

Header injection or removal will not help the purpose.

By its nature, JSON is vulnerable to JavaScript injection. When you parse the JSON object, the malicious code inflicts its damages. An inordinate increase in the size and depth of the JSON payload can indicate injection. Applying the JSON threat protection policy can limit the size of your JSON payload and thwart recursive additions to the JSON hierarchy.

Hence correct answer is Apply a JSON threat protection policy to all APIs to detect potential threat vectors

Explanation

Before we answer this question , we need to understand what median (50th percentile) and 80th percentile means. If the 50th percentile (median) of a response time is 500ms that means that 50% of my transactions are either as fast or faster than 500ms.

If the 90th percentile of the same transaction is at 1000ms it means that 90% are as fast or faster and only 10% are slower. Now as per upstream SLA , 99th percentile is 800 ms which means 99% of the incoming requests should have response time less than or equal to 800 ms. But as per one of the backend API , their 95th percentile is 1000 ms which means that backend API will take 1000 ms or less than that for 95% of. requests. As there are three API invocation from upstream API , we can not conclude a timeout that can be set to meet the desired SLA as backend SLA ' s do not support it.

Let see why other answers are not correct.

1) Do not set a timeout -- > This can potentially violate SLA ' s of upstream API

2) Set a timeout of 100 ms; --- > This will not work as backend API has 100 ms as median meaning only 50% requests will be answered in this time and we will get timeout for 50% of the requests. Important thing to note here is, All APIs need to be executed sequentially, so if you get timeout in first API, there is no use of going to second and third API. As a service provider you wouldn ' t want to keep 50% of your consumers dissatisfied. So not the best option to go with.

*To quote an example: Let ' s assume you have built an API to update customer contact details.

- First API is fetching customer number based on login credentials

- Second API is fetching Info in 1 table and returning unique key

- Third API, using unique key provided in second API as primary key, updating remaining details

* Now consider, if API times out in first API and can ' t fetch customer number, in this case, it ' s useless to call API 2 and 3 and that is why question mentions specifically that all APIs need to be executed sequentially.

3) Set a timeout of 50 ms -- > Again not possible due to the same reason as above Hence correct answer is No timeout is possible to meet the upstream API ' s desired SLA; a different SLA must be negotiated with the first downstream API or invoke an alternative API

To improve delivery quality, a MuleSoft integration team should adopt automated testing with MUnit. MUnit is MuleSoft ' s testing framework that allows developers to create, design, and run unit and integration tests on their Mule applications. Automated testing with MUnit ensures that each part of the Mule application is tested for correctness and performance, catching issues early in the development cycle. This practice leads to higher quality code, reduced defects, and more reliable integrations.

Other practices mentioned, such as continuous design with API Designer and passive monitoring with Anypoint Monitoring, are important but do not directly address the need for rigorous and automated testing to ensure quality.

References

MuleSoft Documentation on MUnit

Best Practices for Automated Testing with MUnit

In MuleSoft ' s Anypoint Exchange, a complete API specification in RAML (RESTful API Modeling Language) or OAS (OpenAPI Specification) format is represented as a " REST API " . This asset type provides a comprehensive description of the API, including endpoints, methods, request/response structures, and other relevant details. It serves as the blueprint for implementing and consuming the API, ensuring that all stakeholders have a clear understanding of its functionality and design.

Other asset types like connectors, API spec fragments, and SOAP APIs represent different components or partial specifications, but only REST APIs provide the full specification in the mentioned formats.

References

MuleSoft Anypoint Exchange Documentation

API Specification Documentation on RAML and OAS

To monitor Mule applications deployed on customer-hosted Mule runtimes from Anypoint Platform, you need to enable monitoring for each application within the Runtime Manager ' s application settings. This step ensures that the Runtime Manager Agent, which is already part of the Mule runtime, will collect and send monitoring data to Anypoint Monitoring.

The Runtime Manager Agent acts as the intermediary, collecting metrics and operational data from the Mule applications and transmitting this data to Anypoint Monitoring for analysis and visualization. This setup provides real-time insights and allows for effective monitoring and management of Mule applications.

MuleSoft Documentation on Anypoint Monitoring

Explanation

Correct answer is Depending on the Listener operation configuration, either all messages are consumed by ONLY the primary cluster node or else EACH message is consumed by ANY ONE cluster node

For applications running in clusters, you have to keep in mind the concept of primary node and how the connector will behave. When running in a cluster, the JMS listener default behavior will be to receive messages only in the primary node, no matter what kind of destination you are consuming from. In case of consuming messages from a Queue, you’ll want to change this configuration to receive messages in all the nodes of the cluster, not just the primary.

This can be done with the primaryNodeOnly parameter:

< jms:listener config-ref= " config " destination= " ${inputQueue} " primaryNodeOnly= " false " / >

To address the reliability and scalability issues faced by the insurance provider, adding a load balancer and configuring additional servers in a cluster configuration is the optimal solution. Here ' s why:

Load Balancing: Implementing a load balancer will help distribute incoming API requests evenly across multiple servers. This prevents any single server from becoming a bottleneck, thereby improving the overall performance and reliability of the system.

Cluster Configuration: By setting up a cluster configuration, you ensure that multiple servers work together as a single unit. This provides several benefits:

High Availability: If one server goes down, the load balancer can redirect traffic to other available servers in the cluster, minimizing downtime.

Scalability: Additional servers can be added to the cluster to handle increased load as the business grows.

Fault Tolerance: Clustering allows for automatic failover and recovery, ensuring that applications remain available even if one server fails.

Maintenance: With a cluster configuration, servers can be taken offline for maintenance one at a time without affecting the overall availability of the applications, as the load balancer can redirect traffic to the remaining servers.

VM Queues and Object Stores: In a clustered environment, the use of VM queues and object stores can be more efficiently managed as these resources are distributed across multiple servers, reducing the risk of contention and improving throughput.

MuleSoft Documentation on Clustering: https://docs.mulesoft.com/mule-runtime/4.3/clustering

Best Practices for Scaling Mule Applications: https://blogs.mulesoft.com/dev/mule-dev/mule-4-scaling-applications/

When a Mule application using VM queues is deployed to a customer-hosted cluster or multiple CloudHub v1.0 workers/replicas, messages are consumed in a non-deterministic way. This means that any of the nodes in the cluster or any of the workers can consume the messages from the VM queues, but there is no guaranteed order or specific pattern (such as round-robin or sequential processing).

This non-deterministic message consumption helps in distributing the load and handling messages more efficiently across multiple nodes or workers, improving the scalability and reliability of the application.

References

MuleSoft Documentation on VM Queues and Clustering

Best Practices for Deploying Mule Applications in Clusters