Google Apigee-API-Engineer Actual Free Exam Questions & Community Discussion

Exam Code/Number: Apigee-API-Engineer
Exam Name/Title: Google Cloud - Apigee Certified API Engineer
Certification Provider: Google
Corresponding Certification: Apigee Certification Program

Exam Questions: 128
Updated On: Jul 25, 2026

Question #1

As an API Engineer your team has had issues with security vulnerabilities and poor coding practices in the past. You would like to improve your team's reputation within the organization. What step could take to improve your process?

A. Ask the developers to run anti-virus against the code prior to check in.

B. Add code quality analysis into your CI/CD process.

C. Ask the developers to run unit tests prior to code check-in.

D. Add smoke tests to your CI/CD process

Discussion 0

Correct Answer: A Vote an answer

Question #2

Your company runs their internal services across two datacenters in a hot-warm configuration The back-end system for a new API runs in both data centers You want to implement a proxy that handles failover between these data centers What should you do?

A. Create Target Servers for each datacenter and configuring the TargetEndpoint with a LoadBalancer, setting the Is Fallback property on the warm datacenter

B. Use the not datacenter as the TargetEndpoint and configure a FaultRule to call the warm datacenter in case of failure

C. Use a Java Callout to the target, calling the hot datacenter first and the warm datacenter in case of failure

D. Create two service callouts to the target, calling the hot datacenter first and the warm datacenter in the event of failure on the first call

Discussion 0

Correct Answer: D Vote an answer

Question #3

Where does a ScriptTarget node.js application run when deployed to Edge?

A. Within Apigee's node.js runtime called Trireme

B. Inside a Vert x runtime engine

C. Google's V8 JavaScript engine

D. In a Docker container

Discussion 0

Correct Answer: A Vote an answer

Question #4

Your APIs are configured as a relying party on an OpenID Connect platform. You need to inspect and verify the OpenID Connect identity. What two actions should you take?
Choose 2 answers

A. Pass the JWT to a preconfigured 3rd party for verification of the signature, exp, nbf and iat properties

B. Use the OpenID Connect URL to locate a trusted 3rd party for verification the signature, exp, nbf and iat properties

C. Parse the JWT to extract the exp: nbf and iat properties to determine if the token is still valid

D. Verify the signature of the JWT using a shared secret.

E. Using the JKWS URL in the OpenID Connect configuration, fetch the signing key to verify the JWT signature and parameters

Discussion 0

Correct Answer: C,E Vote an answer

Question #5

Your implementation has the following characteristics
1 There are multiple API Products
2 Some API proxies are part of more than one API Product.
3 Quotas are configured at the API Product level
4 In the Quota policy the count, time interval and unit is referenced using Verify API Key flow variables at runtime.
5 A single Quota policy is reused across all the products 6. Each app is assigned to exactly one product.
You need to limit the number of requests during weekends for specific products without modifying this design What should you do?

A. Add custom attributes for counts for every product. Create custom quota policies for every product which references these custom attributes

B. Add custom attributes for count at Product level Use a JS Policy to determine which count to use in Quota policy at runtime Use this count attribute in the Quota Policy.

C. Set custom attributes for weekday and weekend count at every product Reference these How variables in the count property of Quota policy at runtime

D. Add custom attributes at the API Product with counts to use for weekdays and weekends. Using flow variables, reference the custom counts in the Quota policy

Discussion 0

Correct Answer: C Vote an answer

Question #6

Which policy can be used to see if a SOAP request matches a provided WSDL?

A. AccessControl

B. MessageValidation

C. XMLThreatProtection

D. XMLValidation

Discussion 0

Correct Answer: C Vote an answer

Question #7

Which feature can be used to limit application consumption to a particular group of API proxy resources?

A. API product

B. RBAC (Role-based Access Control)

C. Virtual host

D. Developer app

Discussion 0

Correct Answer: C Vote an answer

Question #8

In Apigee Quota policy, if it is essential that you do NOT allow any API calls over the quota, which configuration option is used?

A. distributed, non-synchronous

B. non-distnbuted, non-synchronous

C. non-distributed, synchronous

D. distnbuted, synchronous

Discussion 0

Correct Answer: A Vote an answer

Question #9

You are generating tokens depending on a partner's service level at runtime You need to control access token expiration What should you do?

A. Pass access token expiration values as a request query parameter

B. Store and fetch expiration value from Key Value Maps at runtime to use for access token creation.

C. Add expiration times in product custom attributes for retrieval at run time

D. Store and fetch access token expiration times from a configuration file to use at run time

Discussion 0

Correct Answer: B Vote an answer

Download Free Google Apigee-API-Engineer Demo

Simply submit your e-mail address below to get started with our free demo of your Google Apigee-API-Engineer exam.