The storefront integrates with a REST based Address verification service (AVS) that uses token based security. The sequence of calls in the API documentation for this AVS looks like the following
1. Client authentication call, which contains the merchantId and secret in a GET request and returns a token in the response.
2. Address verification call, which contains the token and the address to verify in a POST request.
Once the token is obtained, it is valid for hours and it is not needed to request a new one for subsequent address verification calls, the AVS charges for every request made no matter if it is client authentication call or address verificationcall.
Which three strategies could be applied to allow for efficient use of the service without compromising security? Choose 3 answers
An Architect is documenting the technical design for a single B2C Commerce storefront. The Client has a business requirement to provide pricing that is customized to specific groups:
• 50 different pricing groups of customers
• 30 different pricing groups of employees
• 10 different pricing groups of vendors
Which items should the Architect include in the design in order to set applicable price books based on these requirements''
Choose 2 answers
During the testing of the login form, QA finds out that the first time the user can log in, but every other login attempt from another computer leads to the homepage and the basket being emptied. Developers tried to debug the issue, but when they add a breakpoint to the login action, it is not hit by the debugger.
Whatshould the Architect recommend developers to check?
A developer is remotely fetching the reviews for a product.
Assume that it's an HTTP GET request and caching needs to be implemented, what consideration should the developer keep in mind for building the caching strategy?
A business wants to migrate its customerservice provider from provider A to provider B. Provider e offers a LINK cartridge to integrate with its commerce solution.
Which three artifacts need to be created by the Architect? Choose 3 answers
The Client is Crowing and decided to migrate its ecommerce website to B2C Commerce. The Client provided the Architect with the f metrics for its existing website over the past 12 months and forecasted into the next year:
Noting these historical metrics and the forecasted growth of 300%, which load test targets meet best practices for testing the new B2C Commerce site?
The Client identifies that a segment of customers need to see some products on the site that other customers should not be able to access. All products are maintained within one catalog but in separate categories. A custom attribute will be used on the Profile system object to identify customers that belong to this special segment. A customer group will be made that is qualified for by this Profile custom attribute. The storefront will be customized to include navigation to relevant categories for this customer group.
Unfortunately during technical review the Client points out that the business teams have raised a concern with maintenance and want to use a shared navigation within the catalog and not use separate categories.
Which item should the Architect suggest to efficiently fulfil this new requirement while maintaining scalability?
An existing B2C Commerce site has the following aliases configuration:
Which statement related to this configuration is incorrect?
During discovery, the customerrequired a feature that is not inducted in the standard Storefront Reference Architecture CSFRA). In order to save budget, the Architect needs to find the quickest way to implement this feature.
What is the primary resource the Architect should use to search for an existing community Implementation of the requested feature?
The Client wishes to implement a third party integration that allows for free shipping If the customer Is a member of the third party service. When the customer's order is exported to the Order Management System (OMS) it also creates a custom object in order to track additional data before sending that order data to the third-party service as well.
What technical concern should the Architect raise to protect performance and stability of the site1?
An Order Management System (OMS) handles orders from multiple brandspecific sites, as part of the processing, the OMS sends the processing detail to be added at notes to the orders in B2C Commerce. These processing details are captured temporarily in custom objects, and are later processed by a batch Job that:
• Processes the custom object to extract the orderid and note data.
• Tries to load the order.
• If the order is not found, it deletes the custom object and moves on.
• If the order is found, it updates notes In the Order, upon successful update of this order, it deletes the custom object.
There is an Issue reported that the job is constantly failing and custom objects are growing in number. On investigating the production look the message below is being logged on each failure:
What are three solution The Architect can take to fix this issue without losing meaningful data?
Choose 3 answers
The following promotions are configured with no exclusivity (can be combined with any other promotion) in a -1month campaign:
• Free correct- in -store shipping
• 20% accessories products discount, applies for all customers
• $5 off coupon based discount, sent to a selected group of customers
The combination of above promotions allows customers to get 16 socks for free in store. This was unintended, and the Client If considering disabling the coupon. The Client is concerned about a potential spike in the number of Call Center calls from customers who had the coupon code added to their baskets before it was disabled. As basket lifetime is set to 30 days for all customers, this can continue for the full length of the campaign.
What solutionshould the Architect suggest to keep the Call Center calls to a minimum?
A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly.
Which two options are best practice recommendations for dealing with CSRF validation? Choose 2 answers
During load testing, a third party service isconstantly failing to respond in a timely manner on the Product Listing Page. The page is not affected at it is collecting data with the server side call, however the loading time b increasing.
Which two recommendations should the developer take in order to minimize the risk and Improve the loading time?
Choose 2 answers
A Retailer has a single storefront site and a Product Management System (PIM). The Pin is Generating the master catalog and storefront categorization catalog every day and it uploading them toSFTP
how should the Architect configure the import job flows following the best practices?
The Client has implemented a different category/search layout for mobile and desktop. The code uses a session attribute called deviceType to choose the corresponding layout. This attribute it populated from the browser user agent. After this implementation they have run into these problems:
• Sometimes desktop pages are being served to both desktop and mobile customers.
• Sometimes mobile pages ate being served to both desktop and mobile customers.
The page has caching implementedthat depends; on promotions. SEC is very important and the site traffic is high.
Which solution should the Architect select to resolve the issue without impacting the existing requirements?