MuleSoft Integration Architect Practice Test

Externalizing a Mule runtimes certificate means keeping the certificate material outside the Mule installation and configuring Mule to obtain it from an external location. The best answer reflects the two valid approaches: placing the keystore/truststore in a folder outside Mule_HOME or using an external Secret Manager to fetch the certificates at runtime. Both methods avoid bundling sensitive material inside the runtime and support easier rotation and centralized security. If you already manage certificates in a filesystem, you’d point Mule to that external folder; if you rely on a secrets vault, you’d fetch the certificate data from the Secret Manager. The other options are too restrictive or illogical in how they frame the possibilities, whereas this choice properly captures the available externalization paths.