Get IBM C1000-138 Exam Practice Questions - Real and Updated

Answer : B

The API Manager in IBM API Connect v10.0.3 manages the connection to the user registries that validate users of Provider and Consumer organizations. This functionality ensures that the appropriate user authentication and authorization mechanisms are in place, allowing users to access various services and resources in the API Management environment.

Other options are incorrect:

Option A: Data retention of API event data is handled by API Analytics.

Option C: Configuring analytics data offloading is related to the API Analytics component.

Option D: Invoking requests to the backend services is the role of the API Gateway, not the API Manager.

IBM API Connect v10.0.3 Documentation: API Manager Overview

Answer : D

When Spaces are enabled in API Connect, Consumers, applications, subscriptions approvals, and analytics are now specific per Space. This means that each Space becomes an isolated environment for managing and controlling API usage within that specific context.

IBM API Connect: Managing Spaces

IBM API Connect: Understanding Spaces

Answer : B

In IBM API Connect v10.0.3, if a Catalog associated with the Developer Portal has two gateway services enabled, and each of these gateway services is associated with different analytics services, the Developer Portal will not display any analytics data. This is because IBM API Connect does not support combining or displaying analytics data from multiple analytics services in a single portal view.

Each gateway service would be linked to its own analytics service, and since the Developer Portal is designed to integrate with a single analytics service per Catalog, conflicting analytics configurations prevent the display of any analytics data. As a result, the system does not display any statistics like API calls, response times, or error rates in the Developer Portal when multiple analytics services are configured.

IBM API Connect Documentation

IBM API Connect v10.0.3 - Now Available

Answer : D

In IBM API Connect, when the credential extraction method is set to Form in the client security policy, it means that the client credentials (such as the client ID and secret) must be supplied in a specific format using a POST request. Specifically, the credentials are included in the body of the request in a URL-encoded form. This is typical in OAuth 2.0 workflows where client credentials need to be extracted from a form-based submission, often used in situations involving login or token exchanges.

'Client id' and 'secret' are provided in the request body through form fields, rather than being passed in the URL or headers.

This method adheres to secure practices where sensitive credentials are sent via POST to avoid exposing them in the URL.

Therefore, the correct statement is that client ID and secret must be supplied via a POST request when using the Form credential extraction method.

IBM API Connect Documentation

IBM API Connect v10.0.3 - Now Available

Answer : C

A member of the Consumer organization creates applications that use the APIs available in the Developer Portal. Consumer organizations represent the entities that will be consuming the APIs, and their members are responsible for developing and managing applications that utilize those APIs.

IBM API Connect: Developer Portal Roles

IBM API Connect: Creating and Managing Applications