Download [CHIE] Chartered Integration Engineer Certification Exam Guide and more Exams Technology in PDF only on Docsity!
Exam Guide
Question 1. Which integration governance model centralizes the definition of standards, policies, and reusable assets across the enterprise? A) Service Mesh B) Integration Center of Excellence (ICoE) C) API Gateway D) Data Lake Answer: B Explanation: An ICoE provides a dedicated team that defines and enforces integration standards, governance policies, and reusable assets, ensuring consistency across projects. Question 2. In a Service Level Agreement (SLA), the metric that defines the maximum allowable time for a response to a request is called: A) Service Level Objective (SLO) B) Mean Time to Recovery (MTTR) C) Service Availability Percentage D) Service Credit Answer: A Explanation: An SLO is a specific, measurable target within an SLA, such as “respond to API calls within 200 ms.” Question 3. Which architectural pattern best supports the addition of new consumer applications without modifying existing integration flows? A) Point‑to‑Point B) Hub‑and‑Spoke C) Publish‑Subscribe (Pub/Sub) D) Monolithic Answer: C
Exam Guide
Explanation: Pub/Sub decouples producers and consumers, allowing new subscribers to be added without changing existing producers. Question 4. When evaluating scalability, which drawback is most associated with a point‑to‑point integration approach? A) High latency due to central routing B) Tight coupling and exponential growth of connections C) Limited protocol support D) Inability to enforce security policies Answer: B Explanation: Point‑to‑point requires a direct connection for each pair of systems, leading to O(N²) connections as the number of systems grows. Question 5. An Enterprise Service Bus (ESB) primarily provides which of the following capabilities? A) Direct database replication B) Message transformation and routing C) Front‑end UI rendering D) Container orchestration Answer: B Explanation: An ESB acts as a middleware layer that routes, transforms, and enriches messages between services. Question 6. In microservices integration, which approach delegates the flow control to individual services rather than a central orchestrator? A) Orchestration B) Choreography
Exam Guide
Question 9. Which latency factor is most impacted when a cloud service processes data in a region far from the end‑user? A) CPU utilization B) Network round‑trip time (RTT) C) Disk I/O speed D) Memory bandwidth Answer: B Explanation: Geographic distance increases network RTT, which directly affects perceived latency for users. Question 10. In RESTful API design, which HTTP method should be used to partially update a resource? A) POST B) PUT C) PATCH D) DELETE Answer: C Explanation: PATCH applies partial modifications to a resource, whereas PUT replaces the entire representation. Question 11. Which HTTP status code indicates that the client has exceeded the allowed number of requests in a given time window? A) 429 Too Many Requests B) 403 Forbidden C) 503 Service Unavailable D) 401 Unauthorized Answer: A
Exam Guide
Explanation: 429 signals rate‑limiting enforcement, informing the client to back off. Question 12. When documenting a SOAP service, which artifact defines the service contract? A) OpenAPI Specification B) WSDL (Web Services Description Language) C) GraphQL Schema D) AsyncAPI Document Answer: B Explanation: WSDL describes the operations, messages, and bindings of a SOAP service. Question 13. Which API technology provides high‑performance, binary‑encoded communication ideal for internal microservice calls? A) REST over HTTP/1. B) SOAP with WS‑Security C) gRPC over HTTP/ D) GraphQL over WebSockets Answer: C Explanation: gRPC uses Protocol Buffers for compact binary serialization and HTTP/2 for multiplexed streams, delivering low latency. Question 14. In GraphQL, the term “schema‑first” refers to: A) Defining the data model after implementing resolvers B) Writing the schema definition before coding the resolvers C) Automatically generating schemas from databases D) Using schema‑less JSON payloads
Exam Guide
B) Bulkhead C) Retry D) Sharding Answer: A Explanation: A circuit breaker opens after failure thresholds, preventing further calls until the service recovers. Question 18. Edge caching primarily improves which aspect of API performance? A) Database write throughput B) Latency for geographically dispersed clients C) Internal service message size D) Authentication token generation speed Answer: B Explanation: Edge caches store responses at locations close to end‑users, reducing round‑trip latency. Question 19. In ETL processes, which phase is responsible for applying business rules and data cleansing? A) Extract B) Load C) Transform D) Archive Answer: C Explanation: The Transform stage modifies raw data, applying mappings, validation, and enrichment.
Exam Guide
Question 20. Which approach is characteristic of ELT rather than ETL? A) Performing transformations in a staging database before loading B) Loading raw data directly into the target data warehouse for transformation C) Using a separate ETL server for all processing D) Relying on batch jobs only during off‑peak hours Answer: B Explanation: ELT loads data first and then leverages the data warehouse’s compute power for transformation. Question 21. Change Data Capture (CDC) is most useful for: A) Periodic full data dumps B) Real‑time synchronization of source databases to downstream systems C) Manual data entry validation D) Static reporting dashboards only Answer: B Explanation: CDC captures inserts, updates, and deletes as they happen, enabling near‑real‑time data propagation. Question 22. A Canonical Data Model (CDM) helps integration projects by: A) Enforcing a single physical database schema for all applications B) Providing a neutral, common representation to which all messages are mapped C) Eliminating the need for data transformation altogether D) Requiring each system to adopt the same programming language Answer: B Explanation: CDM acts as an intermediary format, reducing the number of pairwise mappings between systems.
Exam Guide
Answer: C Explanation: The Client Credentials grant enables a service to obtain an access token using its own credentials. Question 26. OpenID Connect (OIDC) adds which capability on top of OAuth 2.0? A) Token revocation B) User authentication and ID token issuance C) Resource server encryption D) API rate limiting Answer: B Explanation: OIDC provides an ID token that contains user identity information, enabling authentication. Question 27. Mutual TLS (mTLS) differs from standard TLS by requiring: A) Only the server to present a certificate B) Both client and server to present and validate certificates C) No certificates, just a pre‑shared key D) Encryption only for outbound traffic Answer: B Explanation: mTLS authenticates both ends of the connection, enhancing security for service‑to‑service calls. Question 28. Which technique is most effective for protecting Personally Identifiable Information (PII) stored in a database? A) Data compression B) Tokenization
Exam Guide
C) Data denormalization D) Indexing Answer: B Explanation: Tokenization replaces sensitive data with non‑sensitive tokens, preserving format while protecting the original values. Question 29. Under GDPR, the right to have personal data erased is known as: A) Right to Portability B) Right to Rectification C) Right to be Forgotten D) Right to Restriction Answer: C Explanation: The “right to be forgotten” obliges controllers to delete personal data upon request. Question 30. Which OWASP Top 10 API security risk involves exposing excessive data through over‑permissive endpoints? A) Broken Object Level Authorization (BOLA) B) Excessive Data Exposure C) Injection D) Security Misconfiguration Answer: B Explanation: Excessive Data Exposure occurs when APIs return more data than necessary, potentially leaking sensitive information. Question 31. An XML External Entity (XXE) attack is mitigated by:
Exam Guide
Question 34. A Key Performance Indicator (KPI) that measures the percentage of failed integration messages over total messages is: A) Throughput B) Error Rate C) Latency D) Availability Answer: B Explanation: Error Rate quantifies the proportion of messages that encounter processing failures. Question 35. Dead Letter Queues (DLQ) are used to: A) Store successfully processed messages for auditing B) Hold messages that could not be processed after retries C) Prioritize high‑value messages over low‑value ones D) Encrypt messages before transmission Answer: B Explanation: DLQs capture messages that repeatedly fail, preventing them from blocking the main queue. Question 36. Idempotent message processing ensures that: A) Each message is processed exactly once, regardless of retries B) Messages are processed in FIFO order only C) Duplicate messages are automatically deleted from the source system D) Processing speed is doubled with parallel threads Answer: A
Exam Guide
Explanation: Idempotency guarantees that reprocessing a message yields the same result, avoiding duplicate side effects. Question 37. Which deployment strategy enables rolling out a new version to a small subset of users before full rollout? A) Blue‑Green B) Rolling Update without canary C) Canary Deployment D) Manual Cutover Answer: C Explanation: Canary deployments expose a new version to a limited audience, allowing validation before wider adoption. Question 38. In CI/CD pipelines for integration projects, which stage validates that the integration flow conforms to the defined schema and business rules before deployment? A – Unit testing B – Integration testing C – Performance testing D – Static code analysis Answer: B Explanation: Integration testing executes the flow end‑to‑end, checking schema compliance and business logic. Question 39. Which pattern helps achieve zero‑downtime updates by keeping two identical environments and switching traffic between them? A) Blue‑Green Deployment B) Rolling Restart
Exam Guide
Question 42. In a hybrid cloud integration scenario, which pattern ensures that data changes made on-premises are propagated to the cloud without impacting the source system’s performance? A) Synchronous request‑reply B) Batch export nightly C) Change Data Capture (CDC) with event streaming D) Manual file transfer via FTP Answer: C Explanation: CDC captures changes in near‑real time and streams them, minimizing load on the source system. Question 43. Which encryption protocol is mandated for TLS 1.3 connections to ensure forward secrecy? A) RSA key exchange B) Diffie‑Hellman (DH) with static keys C) Ephemeral Diffie‑Hellman (DHE) or ECDHE D) No encryption, only integrity checks Answer: C Explanation: TLS 1.3 requires ephemeral key exchange (DHE/ECDHE) to provide forward secrecy. Question 44. Which of the following best describes “data latency” in a distributed integration context? A) Time taken to encrypt data at rest B) Delay between data generation and its availability to consumers C) Number of hops a packet makes across the network D) Size of the data payload in megabytes
Exam Guide
Answer: B Explanation: Data latency measures the elapsed time from creation to consumption, critical for real‑time integrations. Question 45. When implementing API rate limiting, which technique allows a client to continue making requests after a short pause without receiving an error? A) Throttling with a “retry‑after” header B) Immediate request rejection C) Permanent IP blocking D) Unlimited burst mode Answer: A Explanation: Throttling returns a 429 response with a “Retry‑After” header, indicating when the client may retry. Question 46. In the context of integration testing, a “contract test” validates: A) Database schema migrations B) That a service adheres to the published API contract (e.g., OpenAPI) C) Network latency thresholds D) UI responsiveness Answer: B Explanation: Contract testing ensures that the implementation matches the defined interface contract, catching breaking changes early. Question 47. Which of the following is a primary reason to use a message broker that supports exactly‑once delivery semantics? A) To reduce message size B) To guarantee that duplicate processing does not occur, even after retries
Exam Guide
Question 50. Which of the following best describes “latency‑sensitive” integration workloads? A) Batch jobs that run overnight B) Real‑time event processing where delays directly affect business outcomes C) Periodic data archiving D) Static file serving Answer: B Explanation: Latency‑sensitive workloads require immediate processing, such as fraud detection or order fulfillment. Question 51. In a multi‑cloud strategy, data residency requirements are typically addressed by: A) Storing all data in a single public cloud B) Using edge locations or regional data centers that comply with local regulations C) Encrypting data with a public key only D) Ignoring jurisdictional laws Answer: B Explanation: Deploying data in regional locations ensures compliance with data residency mandates. Question 52. Which of the following is an advantage of using a schema registry in a streaming platform? A) Automatic generation of UI components B) Centralized management of Avro/Protobuf schemas, enabling versioning and compatibility checks C) Real‑time video transcoding D) Reducing network bandwidth by compressing JSON
Exam Guide
Answer: B Explanation: A schema registry stores and validates data schemas, ensuring producers and consumers agree on data structure. Question 53. When applying OAuth 2.0 scopes to an API, the primary purpose is to: A) Limit the number of concurrent connections B) Define granular permissions for what the token holder can do C) Encrypt the token payload D) Store user preferences Answer: B Explanation: Scopes restrict token usage to specific operations or resources, enabling fine‑grained access control. Question 54. Which pattern helps isolate failures in one integration flow from affecting others by limiting resource usage? A) Circuit Breaker B) Bulkhead C) Retry D) Fan‑out Answer: B Explanation: Bulkhead isolates resources (threads, connections) per flow, preventing cascading failures. Question 55. In a microservice environment, which technology provides a lightweight way to publish and subscribe to events without a full‑featured message broker? A) HTTP polling B) Apache Kafka
