MCIA-LEVEL-1 Exam Questions and Answers

QUESTION: 26

An organization is creating a set of new services that are critical for their business. The project team prefers using REST for all services but is willing to use SOAP with common WS-" standards if a particular service requires it.
What requirement would drive the team to use SOAP/WS-* for a particular service?

Must use XML payloads for the service and ensure that it adheres to a specific schema
Must publish and share the service specification (including data formats) with the consumers of the service
Must support message acknowledgement and retry as part of the protocol
Must secure the service, requiring all consumers to submit a valid SAML token

Answer(s): D

Explanation:

Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP).
SAML transactions use Extensible Markup Language (XML) for standardized communications between the identity provider and service providers.
SAML is the link between the authentication of a user’s identity and the authorization to use a service.
WS-Security is the key extension that supports many authentication models including: basic username/password credentials, SAML, OAuth and more.
A common way that SOAP API’s are authenticated is via SAML Single Sign On (SSO). SAML works by facilitating the exchange of authentication and authorization credentials across applications. However, there is no specification that describes how to add SAML to REST web services.

Reference:

https://www.oasis-open.org/committees/download.php/16768/wss-v1.1-spec-os-SAMLTokenProfile.pdf

Reveal Solution Next Question

QUESTION: 27

Refer to the exhibit.

A business process involves two APIs that interact with each other asynchronously over HTTP. Each API is implemented as a Mule application. API 1 receives the initial HTTP request and invokes API 2 (in a fire and forget fashion) while API 2, upon completion of the processing, calls back into API l to notify about completion of the asynchronous process.
Each API Is deployed to multiple redundant Mule runtimes and a separate load balancer, and is deployed to a separate network zone.
In the network architecture, how must the firewall rules be configured to enable the above Interaction between API 1 and API 2?

To authorize the certificate to be used both APIs
To enable communication from each API’s Mule Runtimes and Network zone to the load balancer of the other API
To open direct two-way communication between the Mule Runtimes of both API’s
To allow communication between load balancers used by each API

Answer(s): B

Explanation:

* If your API implementation involves putting a load balancer in front of your APIkit application, configure the load balancer to redirect URLs that reference the baseUri of the application directly. If the load balancer does not redirect URLs, any calls that reach the load balancer looking for the application do not reach their destination.
* When you receive incoming traffic through the load balancer, the responses will go out the same way. However, traffic that is originating from your instance will not pass through the load balancer. Instead, it is sent directly from the public IP address of your instance out to the Internet. The ELB is not involved in that scenario.
* The question says “each API is deployed to multiple redundant Mule runtimes”, that seems to be a hint for self hosted Mule runtime cluster. Set Inbound allowed for the LB, outbound allowed for runtime to request out.
* Hence correct way is to enable communication from each API’s Mule Runtimes and Network zone to the load balancer of the other API. Because communication is asynchronous one

Reference:

https://docs.mulesoft.com/apikit/4.x/configure-load-balancer-task

Reveal Solution Next Question

QUESTION: 28

An organization is designing the following two Mule applications that must share data via a common persistent object store instance:
- Mule application P will be deployed within their on-premises datacenter.
- Mule application C will run on CloudHub in an Anypoint VPC.
The object store implementation used by CloudHub is the Anypoint Object Store v2 (OSv2).
what type of object store(s) should be used, and what design gives both Mule applications access to the same object store instance?

Application P uses the Object Store connector to access a persistent object store Application C accesses this persistent object store via the Object Store REST API through an IPsec tunnel
Application C and P both use the Object Store connector to access the Anypoint Object Store v2
Application C uses the Object Store connector to access a persistent object Application P accesses the persistent object store via the Object Store REST API
Application C and P both use the Object Store connector to access a persistent object store

Answer(s): C

Explanation:

Correct answer is Application A accesses the persistent object store via the Object Store REST API Application B uses the Object Store connector to access a persistent object * Object Store v2 lets CloudHub applications store data and states across batch processes, Mule components and applications, from within an application or by using the Object Store REST API. * On-premise Mule applications cannot use Object Store v2. * You can select Object Store v2 as the implementation for Mule 3 and Mule 4 in CloudHub by checking the Object Store V2 checkbox in Runtime Manager at deployment time. * CloudHub Mule applications can use Object Store connector to write to the object store * The only way on-premises Mule applications can access Object Store v2 is via the Object Store REST API. * You can configure a Mule app to use the Object Store REST API to store and retrieve values from an object store in another Mule app.

Reveal Solution Next Question

QUESTION: 29

What limits if a particular Anypoint Platform user can discover an asset in Anypoint Exchange?

Design Center and RAML were both used to create the asset
The existence of a public Anypoint Exchange portal to which the asset has been published
The type of the asset in Anypoint Exchange
The business groups to which the user belongs

Answer(s): D

Explanation:

* "The existence of a public Anypoint Exchange portal to which the asset has been published" - question does not mention anything about the public portal. Beside the public portal is open to the internet, to anyone. * If you cannot find an asset in the current business group scopes, search in other scopes. In the left navigation bar click All assets (assets provided by MuleSoft and your own master organization), Provided by MuleSoft, or a business group scope. User belonging to one Business Group can see assets related to his group only Reference:
https://docs.mulesoft.com/exchange/to-find-info https://docs.mulesoft.com/exchange/asset-details Correct answer is The business groups to which the user belongs

Reveal Solution Next Question

QUESTION: 30

When using Anypoint Platform across various lines of business with their own Anypoint Platform business groups, what configuration of Anypoint Platform is always performed at the organization level as opposed to at the business group level?

Environment setup
Identity management setup
Role and permission setup
Dedicated Load Balancer setup

Answer(s): B

Explanation:

* Roles are business group specific. Configure identity management in the Anypoint Platform master organization. As the Anypoint Platform organization administrator, you can configure identity management in Anypoint Platform to set up users for single sign-on (SSO). * Roles and permissions can be set up at business group and organization level also. But Identity Management setup is only done at Organization level * Business groups are self-contained resource groups that contain Anypoint Platform resources such as applications and APIs. Business groups provide a way to separate and control access to Anypoint Platform resources because users have access only to the busine

Reveal Solution Next Question

MuleSoft MCIA-LEVEL-1 Exam (page: 6) MuleSoft Certified Integration Architect - Level 1 Updated on: 15-Feb-2026

QUESTION: 26

Explanation:

Reference:

QUESTION: 27

Explanation:

Reference:

QUESTION: 28

Explanation:

QUESTION: 29

Explanation:

QUESTION: 30

Explanation:

MuleSoft MCIA-LEVEL-1 Exam (page: 6)
MuleSoft Certified Integration Architect - Level 1
Updated on: 15-Feb-2026