Salesforce MuleSoft MuleSoft-Integration-Architect-I Updated Exam

To efficiently handle the invocation of vendor applications and retry requests that generate timeout errors, the most performant way is:

Scatter-Gather Scope: Use a Scatter-Gather scope to invoke each vendor application in parallel. This approach allows the API to send requests to both vendors simultaneously, reducing overall processing time.

Until-Successful Scope: Inside each route of the Scatter-Gather scope, use an Until-Successful scope to handle retries. The Until-Successful scope will retry the request in case of timeout errors until the request succeeds or the maximum retry limit is reached.

This combination ensures that the API can handle intermittent network issues efficiently while minimizing redundant transactions and maximizing performance.

References

MuleSoft Documentation on Scatter-Gather Scope

MuleSoft Documentation on Until-Successful Scope and Error Handling

Explanation

Correct answer is Database polling continues Only HTTP requests sent to the remaining node continue to be accepted. Explanation : Architecture descripted in the question could be described as follows.When node 1 is down , DB polling will still continue via node 2 . Also requests which are coming directly to node 2 will also be accepted and processed in BAU fashion. Only thing that wont work is when requests are sent to Node 1 HTTP connector. The flaw with this architecture is HTTP clients are sending HTTP requests directly to individual cluster nodes. By default, clustering Mule runtime engines ensures high system availability. If a Mule runtime engine node becomes unavailable due to failure or planned downtime, another node in the cluster can assume the workload and continue to process existing events and messages

Diagram Description automatically generated

Explanation

We need to note few things about the scenario which will help us in reaching the correct solution.

Point 1 : The APIs are all publicly available and are associated with several mobile applications and web applications. This means Apply an IP blacklist policy is not viable option. as blacklisting IPs is limited to partial web traffic. It can't be useful for traffic from mobile application

Point 2 : The organization does NOT want to use any authentication or compliance policies for these APIs. This means we can not apply HTTPS mutual authentication scheme.

Header injection or removal will not help the purpose.

By its nature, JSON is vulnerable to JavaScript injection. When you parse the JSON object, the malicious code inflicts its damages. An inordinate increase in the size and depth of the JSON payload can indicate injection. Applying the JSON threat protection policy can limit the size of your JSON payload and thwart recursive additions to the JSON hierarchy.

Hence correct answer is Apply a JSON threat protection policy to all APIs to detect potential threat vectors