AD0-E117: Adobe Experience Manager Sites Architect MasterDemo

An organization is moving its digital platform to AEMaaCS. The lead architect is managing the move and ensuring that the platform remains resilient and delivers a consistent user experience. The team has already completed general functionality testing. As the launch date nears, the team is concentrating on possible real-world challenges, including the platform’s behavior under heavy user traffic and its communication with third-party services.

Which two testing types should the architect prioritize next to ensure a smooth transition to AEMaaCS?

An AEM architect on a large-scale e-commerce project must create a prototype solution that demonstrates a proof of concept (POC) using Adobe Experience Manager (AEM) to manage complex product data.

Which method or approach would be most effective for ensuring this POC succeeds while preserving the client project data structure?

A client migrated from on-premises AEM instances to AEMaaCS. One requirement is the capability to publish complete microsites, including every child page. In the legacy implementation, the client used the Tree Activation option in the Classic UI. They want to use equivalent functionality in AEMaaCS.

What is the recommended approach?

A new AEM Sites implementation contains a component that lists the 10 most recently published PDF documents in AEM Assets. The component behaves as expected during development and passes QA testing. The business begins using it while entering content and uploading assets in preparation for go-live. A few days later, the component’s PDF list is empty.

What is the most likely cause of this issue?

About 300 tags are migrated from /etc/tags to /content/cq:tags before an AEM 6.5 migration. However, AEM does not recognize the tags located under /content/cq:tags.

What steps can resolve the tag migration?

An Architect must design a deployment process that causes no downtime for end users. The system architecture includes an AEM author, two AEM publishers, two publish Dispatchers, and a centrally managed load balancer. The publishers provide some content that cannot be cached.

Which two actions should the Architect take to satisfy these requirements?

A client uses AEM and wants to ensure that its configurations are managed correctly. Consider the following requirements:

• The client has multiple brands that will be hosted on a single AEM implementation.
• The client wants to reuse as much as possible across brands.
• Each brand must be able to override default values for items such as contact-us information.
• The client plans to support multiple languages in multiple regions for every brand.
• Each brand/language/region combination will have its own set of content approvers as part of a custom workflow.

Which approach should an Architect recommend for managing the client’s AEM configurations?

A client wants to enable SSO in the AEM Authoring instance through SAML for content authors. The client also wants to onboard its marketing and design teams to use AEM. However, these teams use their personal Adobe IDs to sign in to Creative and Marketing Cloud products, such as Analytics and Target, in Admin Console. The client wants to enable use of company credentials across all its solutions to enforce standardized security policies.

What should the architect propose to meet these requirements?

A website built on AEM as a Cloud Service (AEMaaCS) uses browser caching of JavaScript and CSS files to improve page-load times. After caching is enabled, QA testers observe that newly deployed components lack newly developed features and styling, even several hours after deployment. Further analysis identifies stale CSS and JavaScript files in the browser cache as the root cause.

What steps would an AEM architect take first to resolve this issue?

A client has an existing AEM site that uses components proxying AEM WCM Core Components. The site uses straightforward page authoring with no referenced content. The client wants to create a new experience in another marketing channel. The plan is to reuse as much existing page content as possible to avoid refactoring the current content and to preserve consistency across channels.

Which AEM capability should an Architect use to satisfy these requirements?

A renowned eCommerce company’s flagship product page experiences a dramatic traffic surge during holiday seasons. Across the last few sales events, users have reported slower loading times and intermittent outages. Initial analysis indicates that the current setup may be under strain from the increased traffic. The company recently integrated a Content Delivery Network (CDN) and intends to fine-tune the dispatcher settings. Leadership stresses delivering a seamless user experience for the upcoming holiday season and wants to use the CDN and dispatcher optimally.

Given the described situation, which two approaches should be prioritized to strengthen the product page’s performance and resilience during peak traffic?

On release day, an AEM code deployment is performed on an on-premises AEM 6.5 environment. After deployment completes, users can access the Author instance without any issues. However, users cannot access any sites through the public domains and receive a 502 Bad Gateway error.

What could be the potential cause of this issue?

An AEM Architect receives a bug-bounty report identifying a content-grabbing vulnerability in an AEM 6.5 production environment.

The exploit permits content grabbing through a service used to return FAQs in JSON format (for example, https://www.aemcms.com/services/faq?term=help).

The following URL performs the content grabbing:

https://www.aemcms.com/services/faq/jcr:content.form.json/bin/querybuilder.json.servlet? path=/apps&p.hits=full&p.nodedepth=1&p.limit=-1

The impacted farm has the following Dispatcher configuration in its /filter section:

/0014 \{ /type "deny" /url '.*/[.][.];/.*' \}  
/0015 \{ /type "deny" /url "/content*" /suffix "*" \}  
/0016 \{ /type "deny" /url "/content*" /selectors "*" \}  
/0021 \{ /type "allow" /method "GET" /url "/services/faq*" \}  

What should the architect do to remediate the vulnerability?

A client’s website fails to display the most recent page content for certain visitors. The client operates two data centers, each with a Dispatcher configured to connect to two Publish machines. The site loading problem occurs only intermittently for visitors coming from one data center.

Which action should the Architect take to resolve the problem?

An e-commerce company is revamping its website with a Single Page Application (SPA) approach in AEM as a Cloud Service (AEMaaCS). Its objectives are to achieve a What You See Is What You Get (WYSIWYG) content-authoring experience for the content-authoring team, retain content structure in AEM, provide seamless end-user browsing without page reloads, and reuse the same content for its mobile app.

Given these objectives, which SPA design model would an AEM architect recommend in AEMaaCS?

Refer to the exhibit.

A customer with an existing AEM implementation wants to enhance product pages with technical data from their PIM system. The PIM system is behind an API Management solution that publicly exposes the PIM APIs as RESTful web services, using Basic Authentication for security. Maintaining consistency with the PIM and securing API access are key integration requirements.

How should the Architect configure the integration between AEM and the PIM?

On AEM 6.5, when an editor attempts to edit pages on the author instance, only some pages display a blank screen.

After inspecting the logs, the following exception is identified:

Which action should an architect try to restore system functionality without data loss?

A client runs multi-tenant AEM sites on AEMaaCS. The client observes that the sites become very slow during the daytime. An AEM architect investigates and determines that a DoS (Denial of Service) attack is the cause.

Which two measures should the architect consider?

A client currently uses Assets on AEM as a Cloud Service (AEMaaCS) and Brand Portal to share assets with external vendors. A new vendor was added to the Adobe Identity Management System (IMS) and assigned the Brand Portal Profile. The client created a Contribution Folder in Assets, but could not find the newly added IMS user when attempting to grant that user permission to the folder.

Why is the user absent from the list of users with whom the folder can be shared?

An AEMaaCS customer wants a subsection of a site that accepts end-user data, including text and documents. The site is expected to receive a high volume of input that requires moderation and masking before it is made publicly available. Because of a legal content policy, data gathered through the site cannot be shared outside the organization.

What should an architect recommend?

An AEM customer is designing a new website. The design indicates that images are very prominent across the website, but there is concern about the wide variety of aspect ratios in use. Images could potentially be used in different locations and components throughout the website.

The customer wants a maintainable solution that limits the amount of content-editing work required when assets are added to pages.

Which solution would an architect recommend?

A client wants to revise how it publishes content. Refer to the following client business requirements:

• The client operates a seasonal business with significant site-wide content changes that must be rolled out together based on the season change over date.
• Content authors must be able to work one season ahead of the publish dates so that all changes can be completed on time.
• Content authors need a way to indicate that all seasonal changes are ready. If the content changes are incomplete, the pages must not be published.
• Content authors must be able to modify the currently live pages without rolling back changes for a future content rollout.

What approach should the Architect recommend?

An architect is in a discovery meeting with a client that uses Adobe Commerce and must present ecommerce integration with AEM.

What would the architect use to demonstrate a quick POC?

A website hosted on AEM as a Cloud Service (AEMaaCS) uses a private key to decrypt data received from a secure web platform. The private key is stored as an encrypted OSGi configuration on the AEM publishers by using the OOTB AEM Crypto Support bundle. Developers report that, although the feature works in the AEMaaCS environments, they cannot decrypt the data in the local development environment.

Which two actions should the architect take to resolve the issue?