MCD-Level-2 Exam Questions and Answers

QUESTION: 6

Which statement is true about using mutual TLS to secure an application?

Mutual TLS requires a hardware security module to be used
Mutual TLS authenticates the identity of the server before the identity of the client
Mutual TLS ensures only authorized end users are allowed to access an endpoint
Mutual TLS increases the encryption strength versus server-side TLS alone

Answer(s): B

Explanation:

Mutual TLS (mTLS) is an extension of TLS that requires both parties (client and server) to present their certificates to each other during the handshake process. This way, both parties can verify each other's identity and establish a secure connection. The authentication of the server happens before the authentication of the client, as the server sends its certificate first and then requests the client's certificate.

Reference:

https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#mutual- authentication

Reveal Solution Next Question

QUESTION: 7

Which statement is true when using XML SDK for creating custom message processors?

Properties are fields defined by an end user of the XML SDK component and serve as a global configuration for the entire Mule project in which they are used
An XML SDK provides both inbound and outbound operations
Operations can be reused in recursive calls
All operations are public

Answer(s): D

Explanation:

When using XML SDK for creating custom message processors, all operations are public by default and can be used by any Mule application that imports them. There is no way to make an operation private or protected in XML SDK.

Reference:

https://docs.mulesoft.com/mule-sdk/1.1/xml- sdk#operations

Reveal Solution Next Question

QUESTION: 8

Which type of cache invalidation does the Cache scope support without having to write any additional code?

Write-through invalidation
White-behind invalidation
Time to live
Notification-based invalidation

Answer(s): C

Explanation:

The Cache scope supports time to live (TTL) as a cache invalidation strategy without having to write any additional code. TTL specifies how long the cached response is valid before it expires and needs to be refreshed. The Cache scope also supports custom invalidation strategies using MEL or DataWeave expressions.

Reference:

https://docs.mulesoft.com/mule-runtime/4.3/cache- scope#cache_invalidation

Reveal Solution Next Question

QUESTION: 9

What is the MuleSoft recommended method to encrypt sensitive property data?

The encryption key and sensitive data should be different for each environment
The encryption key should be identical for all environments
The encryption key should be identical for all environments and the sensitive data should be different for each environment
The encryption key should be different for each environment and the sensitive data should be the same for all environments

Answer(s): A

Explanation:

The MuleSoft recommended method to encrypt sensitive property data is to use the Secure Properties Tool that comes with Anypoint Studio. This tool allows encrypting properties files with a secret key and then decrypting them at runtime using the same key. The encryption key and sensitive data should be different for each environment to ensure security and avoid accidental exposure of sensitive data.

Reference:

https://docs.mulesoft.com/mule-runtime/4.3/secure-configuration- properties

Reveal Solution Next Question

QUESTION: 10

A healthcare portal needs to validate the token that it sends to a Mule API. The developer plans to implement a custom policy using the HTTP Policy Transform Extension to match the token received in the header from the heathcare portal.
Which files does the developer need to create in order to package the custom policy?

Deployable ZIP file, YAML configuration file
JSON properties file, YAML configuration file
JSON properties file, XML template file
XML template file, YAML configuration file

Answer(s): D

Explanation:

To package a custom policy using the HTTP Policy Transform Extension, the developer needs to create an XML template file and a YAML configuration file. The XML template file defines the policy logic using Mule components and placeholders for user-defined properties. The YAML configuration file defines the metadata of the policy, such as its name, description, category, parameters, and dependencies.

Reference:

https://docs.mulesoft.com/api-manager/2.x/http-policy- transform#packaging-the-policy

Reveal Solution Next Question

MuleSoft MCD-Level-2 Exam (page: 2) MuleSoft Certified Developer - Level 2 (Mule 4) Updated on: 12-Feb-2026

QUESTION: 6

Explanation:

Reference:

QUESTION: 7

Explanation:

Reference:

QUESTION: 8

Explanation:

Reference:

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Explanation:

Reference:

MuleSoft MCD-Level-2 Exam (page: 2)
MuleSoft Certified Developer - Level 2 (Mule 4)
Updated on: 12-Feb-2026