Exam MCIA - Level 1 topic 1 question 19 discussion

Actual exam question from Mulesoft's MCIA - Level 1

Question #: 19
Topic #: 1

Refer to the exhibit. An organization deploys multiple Mule applications to the same customer-hosted Mule runtime. Many of these Mule applications must expose an HTTPS endpoint on the same port using a server-side certificate that rotates often.
What is the most effective way to package the HTTP Listener and package or store the server-side certificate when deploying these Mule applications, so the disruption caused by certificate rotation is minimized?

A. Package the HTTPS Listener configuration in a Mule DOMAIN project, referencing it from all Mule applications that need to expose an HTTPS endpoint Store the server-side certificate in a shared filesystem location in the Mule runtime's classpath, OUTSIDE the Mule DOMAIN or any Mule APPLICATION
B. Package the HTTPS Listener configuration in a Mule DOMAIN project, referencing it from all Mule applications that need to expose an HTTPS endpoint Package the server-side certificate in ALL Mule APPLICATIONS that need to expose an HTTPS endpoint
C. Package the HTTPS Listener configuration in a Mule DOMAIN project, referencing it from all Mule applications that need to expose an HTTPS endpoint Package the server-side certificate in the SAME Mule DOMAIN project
D. Package an HTTPS Listener configuration in all Mule APPLICATIONS that need to expose an HTTPS endpoint Package the server-side certificate in a NEW Mule DOMAIN project

Show Suggested Answer

Suggested Answer: A 🗳️

by Outdoor25 at Dec. 28, 2021, 4:25 p.m.

Comments

Submit Cancel

bkahraman

10 months ago

Selected Answer: A

store certificate seperately that is the key

upvoted 1 times

...

gilofernandes

1 year, 2 months ago

Selected Answer: A

Customer-hosted mule runtimes should externalize certificates in a secure external directory. Mules domains provides centralized point of all shared resources. A is the correct answer

upvoted 1 times

...

madgeezer

2 years, 5 months ago

Selected Answer: A

A. Package the HTTPS Listener configuration in a Mule DOMAIN project, referencing it from all Mule applications that need to expose an HTTPS endpoint Store the server-side certificate in a shared filesystem location in the Mule runtime's classpath, OUTSIDE the Mule DOMAIN or any Mule APPLICATION

upvoted 1 times

...

rodriguescont

2 years, 7 months ago

Selected Answer: A

A HTTPS Listener in Mule Domain allows resource optimization and all apps can access it It’s a best practice to store server certificate in an external secure repository

upvoted 1 times

...

anonymouse69420

2 years, 9 months ago

Selected Answer: A

I'll go with A. "...disruption caused by certificate rotation is minimized?" so we can assume they frequently change the certificate. since it's on-prem, they can configure the domain to look up on the file system outside the mule project.

upvoted 2 times

...

Outdoor25

3 years, 1 month ago

I think it should be C. Mule domain has HTTPS connector settings, so certificate should be packaged with Domain rather than individual mule applications. Mule applications are just referencing domain's https connector. All connector settings should be in Domain.

upvoted 2 times

...