An enterprise is embarking on the API-led digital transformation journey, and the central IT team has started to define System APIs. Currently there is no Enterprise Data Model being defined within the enterprise, and the definition of a clean Bounded Context Data Model requires too much effort.
According to MuleSoft's recommended guidelines, how should the System API data model be defined?

• A. The System APIs should expose all back-end system fields
• B. The data model of the System APIs should make use of data types that approximately mirror those from the back-end systems
• C. If there are misspellings of the data fields in the back-end system, Systerm APIs should not correct it, and expose it as-is to mirror the back-end systems
• D. The data model should define its own naming convention, and not follow the same naming as the back-end systems

What should be ensured before sharing an API through a public Anypoint Exchange portal?

• A. The API should be secured using one of the supported authentication/authorization mechanisms to ensure that data is not compromised
• B. The users needing access to the API should be added to the appropriate role in Anypoint Platform
• C. The API should be functional with at least an initial implementation deployed and accessible for users to interact with
• D. The visibility level of the API instances of that API that need to be publicly accessible should be set to public visibility

4 Production environment is running on a dedicated Virtual Private Cloud (VPC) on CloudHub 1,0, and the security team guidelines clearly state no traffic on HTTP.
Which two options support these security guidelines?
Choose 2 answers

• A. Add the entry in the VPC firewall rule.
  
• B. Configure the HTTPS protocol in HTTP listener in the Mule application
• C. Create a custom policy to apply to outgoing and incoming HTTP requests to control access to a configured API endpoint
• D. Configure the IP Blocklist policy to control access to a configured API endpoint from either a single IP address or a range of IP addresses.
• E. Remove the entry from the VPC firewall rule
  

A manufacturing company has deployed an API implementation to CloudHub and has not configured it to be automatically restarted by CloudHub when the worker is not responding.
Which statement is true when no API Client invokes that API implementation?

• A. No alert on the API invocations is raised but alerts on the API implementation can be raised
• B. Alerts on the APT invocation and API implementation can be raised
• C. No alert on the API invocations and APT implementation can be raised
• D. Alerts on the API invocations are raised but no alerts on the API implementation can be raised