Given a Specification and a Sandbox Instance, Configure OCAPI Permissions for Data and Shop APIs. B2C-COMMERCE-DEVELOPER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A developer is configuring OCAPI permissions for a sandbox instance that will be used for development and testing. The specification requires that a test client ID has read access to products and write access to baskets via the Shop API, and read access to orders via the Data API. The developer has configured the Shop API permissions but is unsure how to apply the Data API permissions. What is the best approach?

   • AAdd the Data API permissions to the Shop API permission set
   • BConfigure the Data API permissions separately in the same site's OCAPI settings, assign the same test client ID, and save the changes
   • CUse the same permission set for both APIs by selecting 'All APIs'
   • DCreate a new site for the Data API permissions and assign the test client ID there
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When configuring OCAPI permissions, what must be done to ensure a specific application can use the configured Data API permissions?

   • ACreate a new site for the application.
   • BAssign the application's client ID to the permission set.
   • CSet the API version to the latest available.
   • DEnable the sandbox flag in the application code.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of configuring Shop API permissions in OCAPI?

   • ATo define the data model for products and customers.
   • BTo control which storefront operations a client can perform, such as browsing products and managing baskets.
   • CTo control access to Business Manager administrative functions.
   • DTo manage the site's search index configuration.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary difference between Data API and Shop API permissions in OCAPI?

   • AData API permissions control access to business configuration data, while Shop API permissions control access to storefront customer-facing resources.
   • BData API permissions are read-only, while Shop API permissions allow write operations.
   • CData API permissions are configured per user, while Shop API permissions are configured per client ID.
   • DData API permissions are for sandbox instances only, while Shop API permissions are for production instances only.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A developer needs to configure Data API permissions for a sandbox instance that will be used for both a nightly batch job and a real-time integration. The batch job requires write access to products and read access to orders. The real-time integration requires read access to products and write access to orders. Both use different client IDs. What is the best way to configure the permissions?

   • ACreate one Data API permission set with the union of all required permissions and assign both client IDs to it
   • BCreate two Data API permission sets, but assign the batch job client ID to the real-time integration's permission set and vice versa
   • CCreate two separate Data API permission sets, one for each client ID, with the required resources and operations
   • DCreate one Data API permission set with the intersection of the required permissions and assign both client IDs to it
   Reveal Solution Discussion Select an answer first