Which statement is true about REST connector APIs?

• A. They work exclusively with JSON payloads.
• B. They allow calls to an external service, along with security policy setup and credentials, to be encapsulated and used consistently across the mobile API.
• C. They must be consumed by a single custom API. If several custom APIs need to call an external service, each needs its own REST connector API.
• D. They are required to connect to external services from custom APIs and cannot be bypassed.
• E. They mandate the use of a security policy.

Study the following Node code in MCS:
service.get('/mobile/custom/someapi', function(req, res) {
req.on('data', function(someobject) {
// code
});
req.on('end', function() {
// code
});
});
What are 'data' and 'end'? (Choose the best answer.)

• A. They are named events for which the req.on method code blocks are listening as handlers.
• B. They are filters on HTTP headers of the same name and they will fire if the header is found in the request
• C. They are Node equivalents of "try" and "finally" exception handler blocks in JavaScript.
• D. They provide a mechanism for accepting data and handling timeouts in the end block.

Which two statements are true about published MCS artifacts? (Choose two.)

• A. The MCS artifacts that are marked as published can be deployed to different MCS environments.
• B. It is possible to unpublish, edit, and republish the MCS artifacts that are marked as published.
• C. The MCS artifacts that are marked as published can be moved to the trash.
• D. It is possible to create new draft versions from the MCS artifacts that are marked as published.

Which statement is true about the possibility of a mobile application making API calls to MCS without passing the security credentials that are obtained from a user?

• A. It is possible through anonymous authentication, although some platform APIs will offer reduced functionality.
• B. It is not possible because authentication is mandatory for security reasons.
• C. It is not possible because of technical limitations in OAuth and HTTP Basic.
• D. It is possible when using OAuth2 and Client Credential Flow.

You are building an application that requires a user ID and password for access. However, your customer is concerned that MCS will not be able to gather analytics data unless a user is authenticated.
Which statement is the correct response?

• A. It is possible to gather analytics data without login. Service developers need to define distinct analytic realms for authenticated and unauthenticated users.
• B. MCS can gather analytics data whether or not a user is authenticated. To accomplish this, the mobile application will need to perform anonymous authentication.
• C. There is no anonymous access to the analytics API in MCS. Like the storage feature, analytics requires users to be authenticated.
• D. Authentication is mandatory in MCS. All users must provide credentials on a login page.