API Management Flashcards

What does TIBCO Mashery's Traffic Manager primarily handle?

Answer: Routing, rate limiting, and policy enforcement on incoming API traffic

The Traffic Manager is the runtime gateway engine responsible for routing requests to backends, enforcing rate limits, and applying policies such as transformation and threat protection.

Which feature in TIBCO Cloud API Management allows API providers to expose documentation and a test console to external developers?

Answer: Developer Portal

The Developer Portal is the self-service web interface where external developers discover APIs, read documentation, try interactive calls, and manage their application keys.

What is the purpose of Pre-process and Post-process scripts on a Mashery endpoint?

Answer: To execute custom JavaScript logic before the backend call and after the backend response respectively

Pre-process scripts run before the request is forwarded to the backend (e.g., input validation, header injection), while post-process scripts manipulate the response before it is returned to the client.

How does TIBCO API Management handle API versioning for consumers?

Answer: By defining different endpoint paths or base URLs per version within the same Service definition

API versioning is managed by configuring separate Endpoint definitions with distinct inbound paths (e.g., /v1/, /v2/) within a Service, each pointing to the appropriate backend.

What analytics capability does TIBCO API Management provide out of the box?

Answer: API call metrics including volume, latency, error rates, and top consumers accessible via dashboards and reports

TIBCO Mashery captures call-level telemetry and surfaces it through built-in dashboards covering traffic volume, response times, HTTP error distribution, and top API key consumers.

Which security mechanism does TIBCO API Management support to protect APIs against injection attacks?

Answer: Threat protection policies that inspect and block malicious payloads in query parameters and request bodies

TIBCO API Management includes threat protection policies that scan incoming requests for SQL injection, XSS, and other malicious patterns in query strings and bodies, rejecting suspicious requests.