Salesforce-MuleSoft-Platform-Architect Practice Test
Salesforce Spring 25 Release 152 Questions
Refer to the exhibit.
A developer is building a client application to invoke an API deployed to the STAGING environment that is governed by a client ID enforcement policy.
What is required to successfully invoke the API?
A. The client ID and secret for the Anypoint Platform account owning the API in the STAGING environment
B. The client ID and secret for the Anypoint Platform account's STAGING environment
C. The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment
D. A valid OAuth token obtained from Anypoint Platform and its associated client ID and secret
C. The client ID and secret obtained from Anypoint Exchange for the API instance in the STAGING environment
Explanation:
When you apply a Client ID Enforcement policy to an API instance in API Manager, each client application must first “Request access” via Anypoint Exchange. Upon approval, Exchange generates a unique client_id and client_secret pair scoped to that environment and API instance. The client application then includes those credentials—typically via HTTP Basic headers—on every request. Neither the platform administrator’s org-wide credentials nor a generic environment key suffices; only the per-API, per-application credentials from the Exchange “Request access” flow will satisfy the policy.