C1000-138 practice question 14 of 15
The GraphQL developer incorporated a field that should not be available for introspection or validation by the client. How would the API developer obfuscate the field so clients will not view them?
Full set: 60 questionsIn IBM API Connect's GraphQL implementation, the @hide directive is used to prevent specific fields, arguments, or entire types from being included in the schema exposed to clients. When applied in the GraphQL schema definition, any element marked with @hide is removed from the results of an introspection query and will fail validation if a client attempts to use it. This effectively obfuscates the field from the client's view while it can still exist in the backend implementation.
A. UI settings like "Show/Hide" in the API Manager typically control visibility within the management interface, not the public-facing introspectable schema.
C. A Redaction policy is used to mask or remove sensitive data from the response payload (the data itself), not to alter the API's schema definition.
D. Deleting the field from the schema removes it completely from the API, which is different from hiding it from client introspection while retaining it internally.
1. IBM API Connect Documentation, "Using the @hide directive". This page provides a direct explanation: "You can use the @hide directive to reduce the complexity of your external schema by removing specific fields and types that are not intended for external consumption... Elements that are decorated with @hide are removed from the schema during introspection." (IBM Knowledge Center for API Connect v10.0.x, Creating GraphQL APIs section).
2. IBM API Connect Documentation, "GraphQL proxy API tutorial". Tutorials on creating GraphQL APIs often include advanced steps like schema modification, where directives such as @hide are introduced as a method for controlling schema visibility. (IBM Knowledge Center for API Connect v10.0.x).
Keep practicing
Take the free C1000-138 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other C1000-138 practice questions
- Question 1Which action will reload all the default notifications and overwrite any customizations o…
- Question 2The security team will allow OIDC to be used for Portal access. Which two OIDC provider t…
- Question 3Which set of APIs should be used to register users in the Developer Portal, create applic…
- Question 4Which of the following is true for Products?
- Question 5Which two grant types are supported for native and third-party OAuth providers?
- Question 6Which statement describes a requirement for monetizing a Product?
