The Value of APIs CLOUD-DIGITAL-LEADER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has multiple internal teams that each expose their own APIs with inconsistent authentication and rate limiting. They want to standardize API governance without forcing teams to rewrite their services. What is the most effective approach?

   • ACreate a shared library that all teams must use for authentication and rate limiting.
   • BRequire each team to implement the same authentication and rate-limiting code in their services.
   • CUse Apigee as a central API gateway to apply consistent security and rate-limiting policies.
   • DDisable authentication and rate limiting until a common standard is agreed upon.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A bank wants to allow third-party financial apps to initiate payments on behalf of customers, but only with the customer's explicit consent. The bank also wants to avoid exposing its core banking systems directly. What is the best approach?

   • AExpose a well-defined API that handles payment requests and includes authentication and consent mechanisms.
   • BSend payment instructions via email to a bank employee for manual processing.
   • CProvide third-party apps with direct access to the core banking database.
   • DAllow third-party apps to use the bank's internal employee portal.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A SaaS company wants to allow its customers to build custom integrations with its platform. They plan to charge based on the number of API calls. Which combination of actions best supports this business model?

   • AOpen-source the entire platform so customers can run it themselves.
   • BPublish API documentation and use an API management platform to meter usage and generate billing reports.
   • CSell a one-time license for the API and provide no ongoing support.
   • DProvide a shared API key to all customers and track usage manually.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company wants to let its logistics partner automatically retrieve real-time order status. The partner uses a different internal system, and the company wants to avoid giving direct database access. What is the most appropriate approach?

   • ASend daily CSV files of order status to the partner via email.
   • BExpose a REST API that returns order status in a structured format, and provide the partner with API credentials.
   • CProvide the partner with VPN access to the internal order management system.
   • DShare a read-only database replica with the partner so they can query the data directly.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company wants to monetize its API by offering a free tier and a premium tier. The free tier should have rate limits and limited features, while the premium tier should have higher limits and access to additional endpoints. They want to automate the sign-up process for developers. What is the best approach?

   • AUse Apigee to define API products with different rate limits and features, and use the developer portal for self-service sign-up.
   • BUse a single API key for all developers and track usage in a spreadsheet.
   • CProvide the same API to all developers and rely on an honor system for usage.
   • DCreate two separate APIs and manually approve each developer for the premium tier.
   Reveal Solution Discussion Select an answer first