APIGEE Test

Which standard authorization token strategies contain secure, self-validating claims of the user's identity and entitlements?

You are designing the authorization and authentication components of an API. Your system does not have knowledge about the user's credentials, but does need to verify the user's identity. What OAuth flow is most appropriate?

As an API Engineer you have been asked to automate the deployment process for Apigee. What steps should be included during the automated process?

As an API Engineer you attend a meeting where a Product Owner would like to resell a 3rd party Cloud storage service to existing customers. The project entails calling the 3rd party APIs and setting up new storage accounts for the Product Owners, customers to use. The customers will use a mobile app to access the new feature. The customers data is currently stored inside the company you work for. The Product Owner asks you to recommend a design that would provide the best experience for the customer. Which two design recommendations would you make?

As an API Engineer you are asked by the Scrum Master to assign a number value to a scope of work. What purpose does the point value serve?

The security team is concerned about SQL injection when exposing an API to the general public. What could you do to reduce the chance of a successful attack?

You are working with a legacy API. The existing backend has been using headers to filter data. There are many existing consumers of the API. What could you do to minimize impacts while following Apigee recommended practices in API design?