Secure data at rest and in transit20% of the exam
Mutual TLS and certificate validation
Configure mutual client/server identity, distinguish revocation controls, and apply the exact Mule 4.6 schema and Java revocation contracts.
Implement transport layer security (TLS) mutual authentication on the client and server side.
~6 min read · 12 practice questions ·
What the exam expects
- Supply the client's and server's own identities and their peer-trust material.
- Select a private-key identity and read the presented client certificate.
- Separate revocation preference, fallback, chain scope and indeterminate-status policy.
- Choose one valid revocation mechanism and satisfy its input requirements.
Key terms: mutual TLS authenticates both TLS peers; an end entity is a presented leaf identity; OCSP queries certificate status; a CRL lists revoked certificates; a trust anchor grounds certificate-path trust.
Key facts
Identity selector
- Detail
- Key-store alias selects a private-key entry.
Listener certificate
- Detail
- Direct two-way TLS exposes
attributes.clientCertificate.
Default selection
- Detail
- No revocation mechanism is selected by the builder.
Wrapper shape
- Detail
- Select exactly one revocation mechanism child.
Fallback control
- Detail
noFallback=truemaps toNO_FALLBACK.
Chain scope
- Detail
- Only End Entities limits checking to end-entity certificates.
Custom signer
- Detail
- The response-signing certificate belongs in the truststore.
CRL inputs
- Detail
- Supply readable CRLs and the explicitly required truststore.
Sources for this section (7)
- HTTP referenceraw.githubusercontent.com (opens in a new tab)
- TLS buildergithub.com (opens in a new tab)
- TLS schemagithub.com (opens in a new tab)
- Mule checkergithub.com (opens in a new tab)
- Java optionsdocs.oracle.com (opens in a new tab)
- Custom OCSPgithub.com (opens in a new tab)
- CRL implementationgithub.com (opens in a new tab)
- Why should a diagnostic report use a separate annotated collection?
- When must the prior run's ignored-exception evidence be captured?
- How is the returned list ordered?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the MuleSoft Developer II pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 29 lessons of the MuleSoft Developer II guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (12 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both