Free MCPA - Level 1: MuleSoft Certified Platform Architect - Level 1 Exam Questions and Answers

Last updated: September 6, 2026

Provider

Mulesoft

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   How are an API implementation, API client, and API consumer combined to invoke and process an API?

   • A. The API consumer creates an API implementation, which receives API invocations from an API such that they are processed for an API client
   • B. The ApI consumer creates an API client, which sends API invocations to an API such that they are processed by an API implementation
   • C. The ApI client creates an API consumer, which sends API invocations to an API such that they are processed by an API implementation
   • D. The API client creates an API consumer, which receives API invocations from an API such that they are processed for an API implementation
   Reveal Answer

2. Question #2

   An API client calls one method from an existing API implementation. The API implementation is later updated. What change to the API implementation would require the API client's invocation logic to also be updated?

   • A. When the data type of the response is changed for the method called by the API client
   • B. When a child method is added to the method called by the API client
   • C. When a new required field is added to the method called by the API client
   • D. When a new method is added to the resource used by the API client
   Reveal Answer

3. Question #3

   What Mule application deployment scenario requires using Anypoint Platform Private Cloud Edition or Anypoint Platform for Pivotal Cloud Foundry?

   • A. When it is required that ALL APIs are private and NOT exposed to the public cloud
   • B. When it Is required to make ALL applications highly available across multiple data centers
   • C. When ALL backend systems in the application network are deployed in the organization's intranet
   • D. When regulatory requirements mandate on-premises processing of EVERY data item, including meta-data
   Reveal Answer

4. Question #4

   What do the API invocation metrics provided by Anypoint Platform provide?

   • A. Measurements of the effectiveness of the application network based on the level of reuse
   • B. Proactive identification of likely future policy violations that exceed a given threat threshold
   • C. ROI metrics from APIs that can be directly shared with business users
   • D. Data on past API invocations to help identify anomalies and usage patterns across various APIs
   Reveal Answer

5. Question #5

   An API has been updated in Anypoint Exchange by its API producer from version 3.1.1 to 3.2.0 following accepted semantic versioning practices and the changes have been communicated via the API's public portal. The API endpoint does NOT change in the new version. How should the developer of an API client respond to this change?

   • A. The API producer should be requested to run the old version in parallel with the new one
   • B. The update should be identified as a project risk and full regression testing of the functionality that uses this API should be run
   • C. The API client code ONLY needs to be changed if it needs to take advantage of new features
   • D. The API producer should be contacted to understand the change to existing functionality
   Reveal Answer

6. Question #6

   An organization wants to make sure only known partners can invoke the organization's APIs. To achieve this security goal, the organization wants to enforce a Client ID Enforcement policy in API Manager so that only registered partner applications can invoke the organization's APIs. In what type of API implementation does MuleSoft recommend adding an API proxy to enforce the Client ID Enforcement policy, rather than embedding the policy directly in the application's JVM?

   • A. A Mule 3 or Mule 4 application modified with custom Java code
   • B. A Mule 3 application using APIkit
   • C. A Non-Mule application
   • D. A Mule 4 application with an API specification
   Reveal Answer

7. Question #7

   Version 3.0.1 of a REST API implementation represents time values in PST time using ISO 8601 hh:mm:ss format. The API implementation needs to be changed to instead represent time values in CEST time using ISO 8601 hh:mm:ss format. When following the semver.org semantic versioning specification, what version should be assigned to the updated API implementation?

   • A. 3.1.0
   • B. 3.0.2
   • C. 3.0.1
   • D. 4.0.0
   Reveal Answer

8. Question #8

   A company requires Mule applications deployed to CloudHub to be isolated between non-production and production environments. This is so Mule applications deployed to non-production environments can only access backend systems running in their customer-hosted non-production environment, and so Mule applications deployed to production environments can only access backend systems running in their customer-hosted production environment. How does MuleSoft recommend modifying Mule applications, configuring environments, or changing infrastructure to support this type of per-environment isolation between Mule applications and backend systems?

   • A. Modify properties of Mule applications deployed to the production Anypoint Platform environments to prevent access from non-production Mule applications
   • B. Create non-production and production environments in different Anypoint Platform business groups
   • C. Create separate Anypoint VPCs for non-production and production environments, then configure connections to the backend systems in the corresponding
   • D. Configure firewall rules in the infrastructure inside each customer-hosted environment so that only IP addresses from the corresponding Anypoint Platform
   Reveal Answer

9. Question #9

   What is most likely NOT a characteristic of an integration test for a REST API implementation?

   • A. The test prepares a known request payload and validates the response payload
   • B. The test is triggered by an external HTTP request
   • C. The test needs all source and/or target systems configured and accessible
   • D. The test runs immediately after the Mule application has been compiled and packaged
   Reveal Answer

10. Question #10

    A Mule application exposes an HTTPS endpoint and is deployed to the CloudHub Shared Worker Cloud. All traffic to that Mule application must stay inside the AWS VPC. To what TCP port do API invocations to that Mule application need to be sent?

    • A. 443
    • B. 8082
    • C. 8091
    • D. 8081
    Reveal Answer