C_CPI Practice Test 16 — 15 Questions

Question 1

An integration developer is configuring a Process Integration scenario in SAP Cloud Integration that uses a SOAP receiver adapter to call an external web service. The web service requires WS-Security with a UsernameToken for authentication. The developer has configured the SOAP adapter with the appropriate security settings. However, during testing, the external service returns a '401 Unauthorized' error. The developer verifies that the username and password are correct. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The WS-Security policy requires the password to be sent as plain text, but the adapter is configured to send it as a digest.. WS-Security UsernameToken supports two password types: PasswordText and PasswordDigest. If the external service expects one type but the adapter sends the other, authentication fails with a 401 Unauthorized. The developer must check the service's WS-Security policy and configure the SOAP adapter's password type accordingly to match the expected format.

Answer

The external service requires the UsernameToken to be signed, but the adapter is only configured to encrypt it.

Answer

The SOAP adapter is missing a keystore entry for the external service's certificate.

Answer

The SOAP adapter does not support WS-Security UsernameToken; it only supports Basic Authentication.

Question 2

An integration developer is configuring a SOAP receiver adapter in SAP Cloud Integration to call an external web service that requires WS-Security with a username token. The developer needs to ensure the credentials are not stored in plain text in the integration flow and can be changed without redeploying. What is the appropriate configuration?

Accepted Answer

Create a User Credentials artifact in the Security Material monitor, reference it from the SOAP adapter's WS-Security configuration, and update the artifact when credentials change.. The SOAP receiver adapter supports WS-Security username tokens backed by a User Credentials artifact stored in the tenant's Security Material. Referencing that artifact keeps the password out of the integration flow and allows credential rotation by updating the artifact, with no redeployment required. This satisfies both the security and operational requirements for calling the external service.

Answer

Enter the username and password directly in the SOAP adapter's WS-Security configuration fields and redeploy the flow whenever credentials change.

Answer

Use a Secure Store artifact to hold the password only, and hardcode the username in the adapter because usernames are not sensitive.

Answer

Store the credentials in a Partner Directory parameter and reference the parameter using a dynamic expression in the SOAP adapter.

Question 3

An integration developer is creating a new integration flow in SAP Cloud Integration to transform an incoming XML order into a JSON payload for a REST receiver. The developer wants to define the transformation logic visually by dragging source and target fields onto a canvas. Which step type should be used?

Accepted Answer

Message Mapping step referencing an operation mapping created in the graphical mapping editor. The graphical message mapping editor is the visual environment for defining field-to-field transformations, and an integration flow consumes such a mapping through a Message Mapping step. This step references the mapping artifact and applies it at runtime, converting the incoming XML order into the JSON structure the REST receiver expects without hand-written code.

Answer

Groovy Script step containing a hand-written script that builds the JSON output

Answer

XSLT Mapping step with a stylesheet uploaded from the local file system

Answer

Content Modifier step with an expression that rewrites the payload body

Question 4

An integration developer is creating an integration flow that must log the message payload at a specific point for debugging purposes. The developer wants the logged content to be visible in the tenant's message processing log without storing the full payload permanently. Which step should be used?

Accepted Answer

Message Log step configured to log the payload at that position. The Message Log step captures the message payload into the message processing log at the exact position it is placed in the flow. It is the purpose-built step for debugging payloads and avoids custom scripting or header manipulation. The other options either do not log or require custom code and risk side effects.

Answer

Content Modifier with the body logged as a header

Answer

Message Mapping step with trace logging enabled

Answer

Groovy Script step writing to the tenant log via the script API

Question 5

You are developing an integration flow in SAP Cloud Integration that reads a message from a JMS queue. The queue is configured with a message retention period of 2 days. A downstream receiver is temporarily unavailable, and messages are not being consumed. After 2 days, what happens to the messages in the queue?

Accepted Answer

The messages are deleted from the queue and cannot be retrieved.. The JMS queue in SAP Cloud Integration enforces a message retention period. When that period elapses, messages are automatically deleted and cannot be recovered. This prevents indefinite accumulation of unconsumed messages. Therefore, the messages are deleted from the queue and cannot be retrieved. The other options describe behaviors that are not default or require additional configuration.

Answer

The messages are automatically moved to a dead letter queue for later processing.

Answer

The messages remain in the queue indefinitely until consumed.

Answer

The messages are archived to a persistent store for auditing purposes.

Question 6

An integration developer is configuring a Request Reply step in an integration flow that calls an external REST API. The API returns a JSON response that must be merged with the original request payload before being sent to the receiver. Which pattern should the developer use?

Accepted Answer

Use a Request Reply step, then a Message Mapping or Groovy Script step to combine the response with the saved original payload.. A Request Reply step replaces the message body with the API response, so the original request payload must be preserved separately and then merged with the response using a mapping or script. This is the standard enrichment pattern in SAP Cloud Integration.

Answer

Use a Splitter step to separate the request and response, then a Gather step to merge them.

Answer

Use a Multicast step with two branches, one calling the API and one retaining the original, then rely on the multicast to merge the outputs.

Answer

Use a Content Enricher step to merge the API response into the original message.

Question 7

A developer needs to call an SAP S/4HANA OData V2 service that requires principal propagation from an on-premise SAP NetWeaver Gateway. The Cloud Integration tenant is connected through Cloud Connector. Users authenticate to Cloud Integration with their SAP IAS identity, and the backend expects the SAP user context. Which combination of configuration elements is required to make principal propagation work end to end?

Accepted Answer

Configure the OData receiver with authentication method 'Principal Propagation' and enable the 'System Logon' in Cloud Connector with the X.509 certificate trust between Cloud Connector and the backend.. Principal propagation forwards the logged-in user's identity to the on-premise backend by having Cloud Connector issue a short-lived certificate for that user, which the backend trusts. The receiver adapter must be set to Principal Propagation, and Cloud Connector must be configured for System Logon with the correct trust configuration. Neither side alone is sufficient, and alternatives like Basic or Client Certificate authenticate the application rather than the user.

Answer

Configure the OData receiver with authentication method 'Basic Authentication' and store the SAP backend user credentials in a User Credentials artifact in the tenant.

Answer

Configure the OData receiver with authentication method 'Client Certificate' and import the tenant's keystore certificate into the backend's trusted CA list.

Answer

Configure the OData receiver with authentication method 'OAuth 2.0 Client Credentials' and map the IAS user to a backend service user in the Cloud Connector principal mapping table.

Question 8

An integration developer is troubleshooting a Cloud Integration flow that intermittently fails with a 'Message processing failed: Unable to acquire a connection from the connection pool' error. The flow uses an HTTP receiver adapter to call an external system. The external system is known to have variable response times. Which action should the developer take to resolve this issue?

Accepted Answer

Increase the maximum number of connections in the connection pool for the HTTP receiver adapter. The error indicates that the connection pool has no available connections when a request needs one. This happens when the number of concurrent requests exceeds the pool's maximum size, especially if the external system responds slowly and holds connections. Increasing the maximum pool size directly provides more connections, resolving the exhaustion. Other options either do not address the pool limit or reduce performance without fixing the root cause.

Answer

Enable the 'Use Keep-Alive' option in the HTTP receiver adapter

Answer

Increase the connection timeout value in the HTTP receiver adapter

Answer

Reduce the number of concurrent threads processing messages in the integration flow

Question 9

An integration developer is troubleshooting an integration flow that intermittently fails when calling an external REST API. The API returns HTTP 429 Too Many Requests during peak loads. The developer wants to make the flow more resilient without changing the external API. Which TWO actions should the developer take? (Choose two.)

Accepted Answer

Implement a throttling mechanism in the integration flow to limit the number of outbound calls per time interval.. HTTP 429 responses indicate the external API is rate limiting the caller. The effective remedies are to retry with exponential backoff, which spaces attempts and respects the API's recovery time, and to throttle outbound calls so the flow stays within the allowed request rate. Together these actions reduce 429 occurrences without modifying the external API, addressing the root cause of the intermittent failures.

Answer

Switch the receiver adapter from HTTPS to HTTP to bypass rate limiting.

Answer

Increase the JVM heap size of the tenant to handle more concurrent requests.

Answer

Disable the CSRF protection on the sender adapter to reduce processing overhead.

Question 10

An integration developer needs to expose an integration flow in SAP Cloud Integration as an HTTPS endpoint that external partners can call. The partner requires mutual TLS authentication and the developer must ensure only authorized clients can invoke the flow. Which configuration should be applied to the HTTPS sender adapter?

Accepted Answer

Configure the sender adapter with Client Certificate authentication and assign a role to the certificate. Mutual TLS requires the client to present a certificate during the handshake, which the HTTPS sender adapter supports through Client Certificate authentication. Mapping the certificate to a user and role ensures only authorized partners can invoke the flow. Token-based or password-based options do not provide the certificate handshake the partner demands.

Answer

Set the adapter to Basic authentication and store partner credentials in a User Credentials artifact

Answer

Enable CSRF protection and require a session cookie

Answer

Use OAuth 2.0 client credentials with a generated client ID and secret

Question 11

You are designing an integration flow in SAP Cloud Integration that processes messages from a JMS queue. The queue is configured with a message retention period of 7 days. During a maintenance window, the consumer integration flow is stopped for 10 days. After the flow is restarted, what happens to messages that were enqueued during the downtime?

Accepted Answer

Messages older than 7 days are deleted, and only those within the retention period are available.. JMS queues in SAP Cloud Integration enforce a configured message retention period. Messages that remain in the queue longer than this period are automatically deleted. In this scenario, with a 7-day retention and a 10-day consumer outage, messages older than 7 days are purged, and only messages enqueued within the last 7 days can be consumed after restart. This is a critical consideration for designing reliable asynchronous integrations.

Answer

All messages are retained indefinitely until consumed.

Answer

Messages are moved to a dead letter queue after 7 days.

Answer

The queue automatically extends the retention period during downtime to prevent loss.

Question 12

You are configuring a JMS receiver adapter in SAP Cloud Integration to send messages to a queue. The queue is configured with a maximum message size of 10 MB. During testing, you notice that messages larger than 10 MB are being rejected and the integration flow fails. Which action should you take to handle this situation gracefully?

Accepted Answer

Add a Splitter step before the JMS receiver adapter to divide the large message into smaller messages that are within the size limit.. When a JMS queue enforces a maximum message size, the integration flow must ensure that messages sent do not exceed that limit. Splitting the large message into smaller parts using a Splitter step allows each part to be sent separately and successfully. This is a standard pattern for handling large payloads with size-constrained receivers.

Answer

Enable the 'Split Message' option in the JMS receiver adapter to break large messages into smaller chunks.

Answer

Configure a retry mechanism with a backoff policy in the JMS receiver adapter to resend the message until it fits.

Answer

Use a Content Modifier to set the JMS message size property to a larger value before the JMS receiver adapter.

Question 13

When designing an iFlow that connects to an external OData API, which step is necessary to ensure that the integration flow handles large data sets efficiently using pagination?

Accepted Answer

Use the OData adapter's pagination support features.. Pagination is critical for avoiding memory issues when processing large datasets. By configuring the OData adapter to use 'top' and 'skip' parameters, or by using the built-in pagination support, the iFlow retrieves data in chunks. This is vital because it prevents the runtime from attempting to load millions of records into RAM simultaneously, which would cause an OutOfMemoryError and crash the integration node.

Answer

Increase the timeout value in the HTTP adapter.

Answer

Convert the payload to binary format.

Answer

Disable logging for the OData call.

Question 14

Which security feature is specifically designed to ensure the integrity and authenticity of a message by preventing it from being altered during transit?

Accepted Answer

Digital Signature.. Message signing using digital signatures ensures both authenticity (who sent it) and integrity (it hasn't been changed). By attaching a cryptographic hash signed with a private key, the receiver can verify that the message content is unchanged. This is a fundamental security requirement for high-trust integration scenarios like B2B financial messaging or government data exchange.

Answer

Transport Layer Security (TLS).

Answer

OAuth2 Authentication.

Answer

Basic Authentication.

Question 15

Where is the best place to configure and store the public keys of target systems that require message signing or encryption?

Accepted Answer

In the Keystore.. The Keystore in the Integration Suite is the centralized location for managing cryptographic artifacts, including public/private key pairs and certificates. Storing public keys here is essential for establishing secure communication, as it enables the platform to verify digital signatures and encrypt outgoing payloads according to the target system's security requirements, ensuring the confidentiality and integrity of sensitive enterprise data.

Answer

In the Integration Flow properties file.

Answer

In the Message Mapping editor.

Answer

In the Content Modifier component.