VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Red Hat Certified Specialist in API Management exam Free Sample Questions

Description

Covers application plans and access limits, user account and credential configuration, usage analytics, OpenID Connect and API key authentication, ActiveDocs documentation, and billing policies.

12 free sample questions156 in the full practice test

Try simulator

EX240 Sample Questions

  1. Question 1

    Advanced

    Access Control · Configure limits and pricing rules

    A Senior API Architect is designing a monetization strategy for a weather data API using Red Hat 3scale. The requirement is to allow free access up to 1,000 calls per day, but charge $0.01 per call for any usage exceeding this limit within the same day, without blocking traffic. Which configuration combination in the Application Plan achieves this specific tiered pricing model?

    Answer and explanation

    Correct answer: C

    In 3scale, pricing rules can be tiered using ranges. To achieve a 'freemium' overage model where the first 1,000 are free and subsequent calls are charged, you define a Pricing Rule where the cost applies starting 'From' 1,001. You should not set a hard Usage Limit (blocking limit) if the goal is to allow traffic to continue (pay-as-you-go) after the threshold.

  2. Question 2

    Intermediate

    Accounts · Create and update user accounts

    An administrator needs to temporarily disable API access for a specific developer account due to a violation of the terms of service. The administrator wants to ensure the developer cannot generate new keys or access the Developer Portal, but the account data must be preserved for an audit. Which action should be taken in the Admin Portal?

    Answer and explanation

    Correct answer: D

    Suspending an account in 3scale disables access to the Developer Portal and API for all users and applications associated with that account, while preserving the data for future review or reactivation. Deleting the account would lose the audit data.

  3. Question 3

    Advanced

    API Authentication · Provide access control using OpenID Connect

    You are configuring OpenID Connect (OIDC) authentication for a Product in 3scale using Red Hat Single Sign-On (RH-SSO) as the identity provider. You need to ensure that the APIcast gateway can validate the JWT tokens locally without contacting the RH-SSO server for every request. Which configuration step is critical to enable this capability?

    Answer and explanation

    Correct answer: C

    For APIcast to perform local validation of JWTs (using RSA signatures), it must download the public keys (JWK) from the Identity Provider. Configuring the 'OpenID Connect Issuer' URL allows APIcast to discover the JWKS endpoint (usually .../protocol/openid-connect/certs) and cache the keys, enabling local token validation.

  4. Question 4

    Intermediate

    Analytics · Analyze alerts, traffic, and integration errors

    A financial institution requires strict monitoring of their Payment API. They need an alert to be triggered specifically when the API backend returns '5xx' server errors for more than 5% of requests within a 5-minute window. Where should this specific alert be configured in the 3scale Admin Portal?

    Answer and explanation

    Correct answer: A

    3scale's built-in alerting system is primarily designed for utilization limits (e.g., reaching 80% of a rate limit). It does not natively support complex logic like 'percentage of 5xx errors' alerts directly in the Admin Portal UI. This type of infrastructure monitoring is handled by external tools like Prometheus (which 3scale/OpenShift integrates with) or Grafana.

  5. Question 5

    Intermediate

    Developer Portal · Customize developer portal

    Which of the following Liquid drops would you use in a Developer Portal template to display the current logged-in user's account name?

    Answer and explanation

    Correct answer: B

    The current_account drop accesses the account information of the currently logged-in user. current_account.name renders the name of that account.

  6. Question 6

    Intermediate

    Service Integration · Create and maintain custom service policies

    A developer is creating a custom policy in 3scale to rewrite the URL of incoming requests. They need to ensure this policy executes after authentication but before the request is sent to the upstream backend. Where should this policy be placed in the policy chain?

    Answer and explanation

    Correct answer: D

    The 'APIcast' policy is typically the final policy in the chain that handles the actual proxying to the upstream backend. Standard authentication (like API Key or OIDC) usually happens implicitly or via specific policies. To rewrite the URL before it goes upstream, the rewrite policy must be placed before the APIcast policy in the chain.

Register free for 6 more questions

Or unlock all 156 EX240 questions with explanations, timed mode and flashcards.

Related practice tests

All Red Hat practice exams