C_CPE_2409 SAP Exam Lab Questions

When connecting from a CAP application to thesandboxof SAP API Business Hub (now SAP Business Accelerator Hub) for APIs such as theBusiness PartnerOData service, the learning content and examples describe that:

The sandbox environment is protected by anAPI keythat must be sent in a specific HTTP header (for example, APIKey or similar) with each request.

Tutorials for CAP/Cloud SDK and S/4HANA integration in a training context show configuration steps where developers obtain anAPI keyfrom the hub and configure it in a destination or in custom code for outbound calls.

This matches optionC – API key.

Why the other options are incorrect:

A – Client certificate:Client certificates are common for productive mutual TLS connections, not for the public sandbox.

B – Service principal:“Service principal” is an Azure-specific concept and not how the sandbox on SAP API Business Hub is accessed.

D – OAuth token:Many productive APIs use OAuth 2.0, but thesandboxin the official exercises is specifically accessed using an API key.

In CAP Node.js projects, the .env file is used to store environment variables that influence application behavior at runtime, such as credentials, service endpoints, or configuration flags. It is automatically loaded by CAP during application startup.

CAP guidelines recommend using .env for environment-specific configuration that should not be hard-coded or committed directly into source files.

Incorrect options:

A: Version control settings are handled by Git configuration files.

B: UI settings belong to UI frameworks, not .env.

CAP’s security architecture relies on:

XSUAA service (C):Provides OAuth 2.0 authorization, JWT tokens, scopes, and role templates for CAP services.

SAP Cloud Identity Services (D):Handles identity provisioning, authentication, and trust relationships, used along with XSUAA.

A Kubernetes Deployment provides:

Declarative updates to pods

Rolling updates and rollbacks

Zero-downtime deployments when configured with suitable strategies

Incorrect options:

A: Databases are external or stateful sets, not deployments.

B: Network policies are configured via dedicated objects.

C: Deployments manage ReplicaSets, not pods "directly."