Apigee Certification Program Apigee-API-Engineer Exam Dumps and Certification Test Engine [Q58-Q82]

admin • January 17, 2026

Apigee Certification Program Apigee-API-Engineer Exam Dumps and Certification Test Engine [Q58-Q82]

Rate this post

(PDF) Apigee Certification Program Apigee-API-Engineer Exam and Certification Test Engine

Use Apigee-API-Engineer Exam Dumps (2026 PDF Dumps) To Have Reliable Apigee-API-Engineer Test Engine

To prepare for the Google Apigee-API-Engineer exam, individuals can take advantage of various resources, including online courses, study guides, and practice exams. Google also offers training programs and certification exams for other Google Cloud products, such as Google Cloud Certified – Professional Cloud Architect and Google Cloud Certified – Professional Data Engineer, which can help individuals enhance their skills and advance their careers in the cloud computing industry.

To become a certified Google Apigee-API-Engineer, candidates must pass a rigorous exam that covers a wide range of topics such as API design, security, caching, and analytics. Apigee-API-Engineer exam is divided into two parts: the first part consists of multiple-choice questions, while the second part is a hands-on coding challenge that requires candidates to build and deploy an API on the Apigee platform. Apigee-API-Engineer exam is designed to test the candidate’s ability to use Apigee to design, develop, test, and deploy APIs that meet business requirements.

NEW QUESTION 58
Which of the following properties have type as “required” in the OpenAPI Specification 2.0? Choose 3 answers

Info

host

paths

license

swagger

basePath

produces

consumes

NEW QUESTION 59
Which features are supported in the OAuthV2 policy? Choose 3 answers

Storing of external access tokens

Setting custom attributes for generated access tokens

Credentials validation when password grant type is used

Setting different expiration for refresh and access tokens.

NEW QUESTION 60
You have a new set of requirements for a mobile app. The product team tells you that the user data already exists from the website version of the app. The user APIs are currently internal access only. The product team has asked for the following.
* The app requires user authentication before data should be accessed.
* The app needs to display user data once the user has logged into the mobile app.
* The app needs to allow changes to user data once the user has logged into the mobile app.
Choose three development tasks that would accomplish the requirements. Choose 3 answers

Create an Oauth 2 0 Service Account API proxy

Create an Oauth 2.0 Password Grant Type API proxy

Create an Oauth 2.0 Client Credential Flow Grant Type API proxy

Create a new API proxy for a GET /v1/customers/{customerid}

Create a new API proxy for a PUT/v1/customers/{customerid}

Create a new API proxy for a POST /v1/customers/{customerid}

Create a new API proxy for a DELETE/v1/customers/{customerid}

NEW QUESTION 61
As an API Engineer you have been asked to automate the build process for Apigee deployments. You decide to build a new tool to deploy the API Bundles using the Apigee Management API. What would be the correct approach?

You should deploy an Apigee microgateway

Management APIs need a separate API product for security reasons.

Each management API you plan to use should be turned into an Apigee Proxy.

Management APIs should be called directly from the tool to the Apigee gateway

NEW QUESTION 62
As an API Engineer your team is deploying code to production tonight. The test team will spend most of the night ensuring there are no bugs in the new release. After you deploy you want to go home. What is the best way to quickly verify a complete deployment?

Unit tests

Smoke tests.

Integration tests.

Code quality analysis.

NEW QUESTION 63
Which feature can be used to automatically distribute traffic across multiple target servers’?

use a concurrent rate limiting policy

use a LoadBalancer entry in the HTTPTargelConnection session

use RouteRules with multiple TargetEndpoints

use an AssignMessage policy

NEW QUESTION 64
How can we specrfy the type of Security (basic auth, oauth) used by the API in OpenAPI Specification 2.0?

specify using the secuntyDefinrtions name property

specify using the secuntySchemas name property

specify using the security Variables name properly

specify using the securityParams name property

NEW QUESTION 65
If a custom analytics report needs to filter based on data from the request payload, which policy would be used?

Custom Report

Message Logging

StatisticsCollector

AssignMessage

NEW QUESTION 66
Given the following Javascript code snippet, which statement is true?
var paloAlto = httpClient.get{‘http://weather.yahooapis.com/forecastrss?w=2467861’); context.session[‘paloAlto’] = paloAlto;

The code execution will wait for the httpClient to receive a response and store that into a session vanable named paloAlto.

The string paloAlto’ will be stored in a message flow variable named paloAlto

The httpClient request will send a POST request to http //weather yahooapis com/forecastrss

The code execution will complete even if the httpClient has not yet received a response

NEW QUESTION 67
You are implementing Concurrent Rate Limit, Spike Arrest and Quota policies in your proxy You want to make sure the simplest checks run first Using the flow shown in the diagram, which order of operations should you follow?

Concurrent Rate Limit > Spike Arrest > Quota

Quota > Concurrent Rate Limit > Spike Arrest

Spike Arrest > Quota > Concurrent Rate Limit

Quota > Spike Arrest > Concurrent Rate Limit

NEW QUESTION 68
An API product in Apigee can be used to

restrict access to a set of APIs

configure the quota limits for APIs

restrict access to APIs in different environments

all of the above

NEW QUESTION 69
Which policy is best used to convert a SOAP response to a JSON response’?

AssignMessage

Message Validation

SOAPToJSON

XMLToJSON

NEW QUESTION 70
You need to restrict write access to those applications that have been specifically delegated that authority by end users Your project is already using OAuth2 for user and app authentication What should you do?

Create a different URL for updates

Implement user rights checks in the underlying microservice

Use an OAuth2 scope to identify allowed applications and user granted rights

Retrieve user rights from a database by inspecting the user id bound to the OAuth2 token

NEW QUESTION 71
Which is the recommended solution lo specify a different backend target for each environment?

Java/JavaScript/Python callout

TargetEndpoint configuration

RouteRules

TargetServer

NEW QUESTION 72
Which statements ate true when the following policy is used?
<SpikeArrest continueOnError=”false” name=”Arrest”>
<Rate>5ps</Rate>
</SpikeArrest>

The rate of 5 per second indicates that 5 requests can be made at any time during a second: but the 6th and later requests dunng the same second would be rejected

Spike arrest is calculated separately on each message processor, so you could end up with significantly more than 5 calls in a second

It is possible to make fewer than 5 requests in a second and still cause a spike arrest

The continueOnError setting means that normal flow processing will resume even if the traffic exceeds the spike arrest rate

NEW QUESTION 73
You are using Apigee Edge as the OAuth Resource Server. The product owner asks you to create an API that logs a user out by revoking OAuth tokens. What should you do?

Use the InvalidateToken operation with cascade=true

Use the InvalidateToken operation with cascade=false

Store a list of revoked tokens in Firebase. On each access, check the list and only allow unrevoked tokens through

Store a list of revoked tokens in Key-Value Maps. On each access, check the list and only allow unrevoked tokens through

NEW QUESTION 74
Which describe the ResponseCache’ policy in Apigee Edge? Select all that are correct

Helps to reduce the response latency

Caches both the request and the response

Helps to reduce the amount of load to the target system.

Should be attached to both Request and Response Flow

NEW QUESTION 75
A customer has added response cache policy on all their search APIs, but traffic to the backend has not reduced much. They ask you to investigate, you find that GET queries are being cached and available in memory but cache misses are still high You want to improve caching and reduce cache misses What should you do?

Use lookup/populate cache policy.

Increase the TimeToLive of cached objects

Review key fragments in cache key, ensuring only important parameters are used

Review and increase the number of items on the cache resource to a higher number

NEW QUESTION 76
You are designing an API that allows a consumer to fetch all orders associated to a given customer. You want to use a RESTful design Which design should you use?

GET/customers/{customer-id)/orders

GET/orders7customer-id={customer-id}

GET /getOrdersForCustomer?customer-id={customer-id}

POST /orders with a post-body of customer-id={customer-id}

NEW QUESTION 77
In an API Proxy flow we need to orchestrate two XML services – Service A and Service B Data fields from each response must be returned in the response to the client. Which identifies a set of Apigee policies that, when used together, could be used to implement this?

AccessEntity,XSL,ExtractVariable

ServiceCallout, ExtractVanable, AssignMessage

XMLToJSON, ExtractVanables, APIKeyValidation

MessageValidation, ServiceCallout, AccessControl

NEW QUESTION 78
Which are NOT a step in the OAuth 2 0 authorization code grant process? Select all that are correct

generate an authorization code

generate an access token

verify the device ID

validate the client API key

obtain the end user’s consent for the application to request the user’s protected resources

validate the developer name

NEW QUESTION 79
Which versioning scheme follows Apigee’s API design best practices?

GET /customers/{customend}/v1

GET /customers/v1/{customerid}

GET /v1/customers/{customerid}

GET /customers?customend={customerid}&version=v1

NEW QUESTION 80
Which describe OAuth 2.0 Refresh Tokens’?

can be used to generate or renew access tokens

is always issued with every access token

can be used to reset crederfflals

may be reused multiple times to create new access tokens

NEW QUESTION 81
Your API generates tokens to authenticate users. You have the following requirements
1. Limited token lifetime.
2. Managed key rotation.
3. Self-verifiable content.
4 Compact data representation
5. Refresh without new challenge.
You plan to use SAML2 Which two of the above-listed requirements are satisfied by using SAML2? Choose 2 answers

Limited token lifetime.

Managed key rotation

Self-verifiable content

Compact data representation

Refresh without a new challenge

NEW QUESTION 82
You need to make multiple target system calls in parallel for a single inbound request The response should return to the client app as a single object.
What should you do?

Use Apigee service callouts

Create route rules for each target endpoint

Create multiple target proxy xmls for each endpoint

Use the Node JS async module to invoke target systems

Loading …