Question 1

Microservices need to be deployed to a platform where container communication can be orchestrated and customized. Which IBM Cloud solution should be selected to meet this requirement?

Accepted Answer

A

Explanation: To deploy microservices where container communication can be orchestrated and customized, the best IBM Cloud solution is the IBM Cloud Kubernetes Service. IBM Cloud Kubernetes Service: This service provides a managed Kubernetes environment to orchestrate and manage containerized applications. It supports microservices architecture by providing tools for managing container communication, scaling, deployment, and load balancing. Kubernetes allows for custom networking policies, service meshes, and other tools necessary for microservices communication and orchestration. Microservices and Kubernetes: Kubernetes is designed to manage and scale microservices. It can handle the orchestration of complex, interdependent services and provides features such as service discovery, traffic routing, load balancing, and monitoring. Reference from IBM Cloud Professional Architect Materials: IBM documentation on IBM Cloud Kubernetes Service confirms its suitability for managing microservices architecture with container orchestration capabilities. Other options are incorrect: B . IBM Cloud Code Engine is a serverless platform, not specifically designed for microservices orchestration. C . IBM Cloud for VMware Solutions is used for running VMware workloads in the cloud. D . IBM Cloud Functions is used for running serverless functions, not for orchestrating containers.

Question 2

Which feature of IBM Cloud Direct Link offers private network connectivity to IBM Cloud services in multiple regions?

Accepted Answer

B

Explanation: The Global Routing option of IBM Cloud Direct Link offers private network connectivity to IBM Cloud services across multiple regions. IBM Cloud Direct Link: This service provides dedicated private network connectivity from your on- premises environment to the IBM Cloud. The Global Routing option allows data to be transmitted securely across multiple IBM Cloud regions, ensuring low latency and high-speed connectivity for global deployments. Global Connectivity: With the Global Routing option enabled, organizations can connect to IBM Cloud services in multiple regions without needing separate connections for each region, simplifying network management and improving performance. Reference: This capability is documented in the IBM Cloud Direct Link service documentation, which highlights the advantages of the Global Routing option for multi-region connectivity. Other options are incorrect: A . Public Routing option does not provide private network connectivity. C . Semi Private Routing option is not a recognized option. D . Private Routing option offers connectivity within a single region rather than multiple regions.

Question 3

Which OSI Layers does IBM Cloud Direct Link utilize?

Accepted Answer

A

Explanation: IBM Cloud Direct Link utilizes Layers 2 and 3 of the OSI model. Layer 2 (Data Link Layer) and Layer 3 (Network Layer): IBM Cloud Direct Link provides private connectivity from an on-premises data center to the IBM Cloud through dedicated connections. At Layer 2, it provides direct network paths, while at Layer 3, it handles routing between networks. Direct Link Functionality: Direct Link offers high-performance, secure connectivity options for hybrid cloud solutions, making it an essential service for enterprises that require a secure and efficient connection to the IBM Cloud. Reference from IBM Cloud Professional Architect Materials: The IBM Cloud Direct Link documentation specifies that it operates at OSI Layers 2 and 3 to provide dedicated connectivity options. Other options are incorrect: B . Layers 1 thru 7 encompasses all OSI layers, which is incorrect. C . Layers 3 and 4 include the transport layer, which Direct Link does not utilize directly. D . Layers 1 and 2 omits Layer 3, which is crucial for network routing.

Question 4

What describes the hardware that IBM Cloud Hyper Protect Crypto Services is built on?

Accepted Answer

A

Explanation: IBM Cloud Hyper Protect Crypto Services is built on FIPS 140-2 Level 3-certified hardware. FIPS 140-2 Level 3 Certification: This level of certification ensures that the hardware used by IBM Cloud Hyper Protect Crypto Services provides a high degree of security, including physical tamper- resistance and the use of strong encryption protocols. IBM Hyper Protect Crypto Services: These services leverage Hardware Security Modules (HSMs) that meet the FIPS 140-2 Level 3 certification. The HSMs provide a secure environment for key management and cryptographic operations, which is critical for meeting stringent regulatory and compliance requirements. Reference from IBM Cloud Professional Architect Materials: Detailed information on IBM Cloud Hyper Protect Crypto Services and its use of FIPS 140-2 Level 3- certified hardware can be found in IBM documentation on IBM Cloud Hyper Protect Crypto Services. Other options are incorrect: B . NIST 140-2 Level 5-certified hardware and D. NIST 140-2 Level 2-certified hardware are not valid terms. C . FIPS 140-2 Level 4-certified hardware would be a higher certification level than is currently used.

Question 5

It is imperative to ensure that internet-facing applications are protected from DDoS attacks, data theft, and bot attacks. Which feature of Cloud Internet Services (CIS) is being discussed here?

Accepted Answer

A

Explanation: The feature of Cloud Internet Services (CIS) being discussed is Security. CIS Security Features: IBM Cloud Internet Services provides robust security measures to protect internet-facing applications from a variety of attacks, including Distributed Denial of Service (DDoS), data theft, and bot attacks. These services are crucial for securing applications and data in the cloud. Protection Mechanisms: CIS integrates multiple layers of security features, such as Web Application Firewall (WAF), DDoS protection, and threat intelligence, which work together to secure applications from cyber threats. Reference from IBM Cloud Professional Architect Materials: The IBM Cloud Internet Services documentation highlights the focus on security to protect applications from DDoS attacks, data breaches, and other threats. Other options are incorrect: B . Performance relates to speed and efficiency, not protection. C . Reliability deals with system uptime and consistency. D . Scalability is about handling increased load, not security.

Question 6

What is a reason for using File Storage (Classic) on IBM Cloud?

Accepted Answer

A

Explanation: File Storage (Classic) on IBM Cloud allows users to adjust the performance as needed by choosing different tiers or adjusting the input/output operations per second (IOPS). This flexibility makes it suitable for workloads with varying performance requirements, such as databases, analytics, or content management systems, where the storage performance can be adjusted to match the workload demand. Performance Adjustability: Users can choose between various performance levels or make adjustments to IOPS, allowing them to balance cost and performance based on current needs. Why File Storage (Classic)? This flexibility makes File Storage (Classic) suitable for dynamic workloads that require changes in performance over time, such as during peak usage periods. Comparison with Other Options: Protects against data in transit failures (B) is not a primary feature of File Storage. Scalable during provisioning (C) is partially correct, but "adjusting performance" is more precise. Asynchronous reads and writes (D) are general file system features, not unique to IBM Cloud File Storage. Reference: IBM Cloud File Storage Documentation IBM Cloud Architect Exam Study Guide

Question 7

Which IBM Cloud database service supports both relational and non-relational data querying?

Accepted Answer

B

Explanation: Databases for Db2 is an IBM Cloud database service that supports both relational and non-relational data querying. IBM Cloud Databases for Db2: Db2 on IBM Cloud is a managed database service that supports both relational and non-relational models. It provides JSON and SQL querying capabilities, allowing users to store and retrieve data in a flexible manner. This makes it capable of handling structured, semi- structured, and unstructured data, thus supporting both relational and non-relational data formats. Support for Multiple Data Types: Db2's multi-model database capabilities enable the execution of SQL queries on relational data and the storage/retrieval of JSON documents, effectively allowing it to function in both relational and non-relational scenarios. Reference from IBM Cloud Professional Architect Materials: According to IBM's documentation on IBM Cloud Databases for Db2, it supports a broad range of workloads and use cases, including transactional (relational) and operational (non-relational) workloads, making it suitable for both SQL and NoSQL data models. The other options are incorrect because: A . Databases for Redis is a key-value store optimized for in-memory data. C . Databases for PostgreSQL is strictly a relational database. D . Databases for etcd is a key-value store primarily used for configuration management.

Question 8

Which high availability strategy will result in a maximum of 4 nines (99.99%) of availability for an IBM Kubernetes Services cluster?

Accepted Answer

D

Explanation: To achieve a high availability strategy with a target of four nines (99.99%) for an IBM Kubernetes Services cluster, you need to deploy multiple worker nodes across at least three availability zones within a single region. This configuration ensures that even if one or two zones experience failures, the cluster remains operational, thus meeting the 99.99% uptime objective. High Availability in IBM Cloud Kubernetes Service: Deploying worker nodes across multiple availability zones provides redundancy and fault tolerance. By having at least three zones, the Kubernetes cluster can tolerate failures in up to two zones while still maintaining functionality. Comparison of Options: A (Single worker node in a single zone): Insufficient for high availability as any zone failure would result in downtime. B (Multiple nodes in a single zone): Provides redundancy but still vulnerable to zone-wide outages, not meeting 99.99% uptime. C (Multiple nodes in at least three zones across multiple regions): While this offers high availability, it exceeds the requirements stated for achieving 99.99% within a single region. Reference: IBM Kubernetes Service Documentation IBM Cloud High Availability Best Practices IBM Cloud Architect Exam Study Guide

Question 9

What provides network connectivity between resources deployed in two different IBM Cloud VPCs?

Accepted Answer

C

Explanation: IBM Cloud Transit Gateway provides network connectivity between different IBM Cloud Virtual Private Clouds (VPCs). It allows for secure, scalable, and efficient communication between resources deployed in separate VPCs, whether they are within the same region or across different regions. How Transit Gateway Works: It acts as a central hub that facilitates the routing of traffic between multiple VPCs without the need to configure individual VPC peering connections. This simplifies network management, improves scalability, and enhances security by maintaining a single point of control. Benefits of Transit Gateway: This service supports both private and public connectivity options and allows for routing policies that can be customized according to business needs. It also provides seamless integration with other IBM Cloud services and third-party networks. Comparison of Other Options: Domain Name System (A): Not used for network connectivity between VPCs. Direct Link (B): Used for dedicated, high-speed connections from on-premises to IBM Cloud but not between VPCs. Power Edge Router (D): Not an IBM Cloud service for inter-VPC connectivity. Reference: IBM Cloud Transit Gateway Documentation IBM Cloud Networking Solutions IBM Cloud Architect Exam Study Guide

Question 10

What is used to allow provisioning of a large number of virtual server instances at the same time when using IBM Cloud Virtual Private Cloud?

Accepted Answer

C

Explanation: Instance Groups are used to allow provisioning of a large number of virtual server instances at the same time when using IBM Cloud Virtual Private Cloud (VPC). IBM Cloud VPC Instance Groups: Instance Groups provide a way to manage a group of identical virtual server instances within a VPC. They support auto-scaling, load balancing, and rolling updates, making it easier to manage a large number of instances. Use Case for Large Deployments: When an organization needs to deploy multiple instances simultaneously, Instance Groups simplify the process by providing a template and scaling policies. Reference from IBM Cloud Professional Architect Materials: IBM documentation on Instance Groups for VPC describes how they are used for managing large- scale deployments. Other options are incorrect: A . Instance Models refer to the types or configurations of instances, not to mass provisioning. B . Instance Replication Policies do not exist in this context. D . Instance Scaling Policies manage scaling but are not used for the initial provisioning of multiple instances.

Question 11

A client created their infrastructure using IBM Cloud Schematics and wants to horizontally scale their resources. How can this be achieved?

Accepted Answer

B

Explanation: IBM Cloud Schematics is an Infrastructure as Code (IaC) tool that uses Terraform to create, update, and manage cloud resources. To horizontally scale resources using IBM Cloud Schematics, a user should add the necessary resources (such as additional virtual machines or instances) by updating the Terraform configuration files and applying those changes through Schematics. How Scaling is Achieved with IBM Cloud Schematics: Users can modify their existing infrastructure definition to add new resources or adjust their configurations. These modifications can be made in the Terraform files that are managed by Schematics. After the modifications, users apply the updated configuration to scale resources horizontally (e.g., adding more instances to a resource pool). Why IBM Cloud Schematics is the Correct Choice: Schematics manages infrastructure as code, which is a more reliable, repeatable, and controlled way to manage changes and scale resources compared to manual methods such as CLI. Comparison with Other Options: A (Add using CLI): Possible but not as efficient or manageable as using Schematics. C (Destroy resources using Console): Irrelevant to scaling. D (Destroy all and recreate): Not a practical or recommended approach for scaling. Reference: IBM Cloud Schematics Documentation IBM Cloud Architect Exam Study Guide

Question 12

Which feature optimizes the work of load balancers on IBM Cloud?

Accepted Answer

B

Explanation: Traffic Steering is a feature in IBM Cloud that optimizes the work of load balancers by directing traffic to the most appropriate resources based on predefined criteria, such as geographic location, resource availability, or other custom rules. This feature is crucial for optimizing application performance, reducing latency, and ensuring high availability across different regions and data centers. IBM Cloud Load Balancer Overview: The IBM Cloud Load Balancer offers several advanced capabilities, including Traffic Steering, which enables intelligent routing of client requests. Traffic Steering can be configured to direct traffic to different backend servers or pools based on various policies like weighted round-robin, geographic proximity, or failover conditions. This optimizes the distribution of workloads and enhances the reliability and responsiveness of applications deployed on the IBM Cloud. Importance of Traffic Steering: Traffic Steering is particularly beneficial in scenarios involving multi- region deployments. It ensures that user requests are served by the closest or most responsive data center, thereby minimizing response times and improving the end-user experience. It also enables flexible routing based on business logic or dynamic conditions, such as sudden surges in traffic or failures in specific regions. Global Load Balancer Role: While the Global Load Balancer (Option D) is used for distributing traffic across multiple regions, Traffic Steering is a specific feature within the load balancing suite that controls how traffic is managed. Traffic Steering complements the Global Load Balancer by providing fine-grained control over traffic distribution strategies, enabling more efficient utilization of resources. Reference: IBM Cloud Load Balancer Documentation IBM Cloud Architect Exam Study Guide IBM Cloud Traffic Steering

Question 13

IBM Cloud offers two content delivery networks: CDN and CIS. Which two networks underpin these two offerings?

Accepted Answer

B

Explanation: IBM Cloud offers two content delivery networks (CDNs): CDN and Cloud Internet Services (CIS). These two offerings are underpinned by the networks of Akamai and Cloudflare, respectively. IBM Cloud CDN: IBM Cloud uses Akamai’s global network for its Content Delivery Network (CDN) service. Akamai is one of the largest and most trusted CDN providers globally, known for its expansive network that delivers content with low latency and high availability. IBM Cloud Internet Services (CIS): This service is built on Cloudflare's global network and offers a suite of services, including a CDN, DDoS protection, web application firewall (WAF), and more. Cloudflare's network spans many data centers worldwide, optimizing traffic delivery and securing applications. Comparison with Other Options: Limelight and KeyCDN (A), CDN 77 and CloudFront (C), Cloudflare and Fastly (D): These are other CDN providers but do not represent the networks underpinning IBM Cloud's CDN offerings. Reference: IBM Cloud CDN Documentation IBM Cloud Internet Services (CIS) Documentation IBM Cloud Architect Exam Study Guide

Question 14

An IT administrator is responsible for selecting the appropriate storage tier for a new application
running on IBM Cloud Power Virtual Servers. They need to consider the workload's peak IOPS and
the performance requirements. They are storing data for long-term archival purposes with a minimal
I/O load and a peak IOPS requirement of 50. Which storage tier should they choose?

Accepted Answer

A

Explanation: For storing data for long-term archival purposes with a minimal I/O load and a peak IOPS requirement of 50, Tier 5 storage is the most appropriate choice. Tier 5 Storage: This storage tier is designed for workloads with low performance and IOPS requirements, such as long-term data archival or infrequently accessed data. Tier 5 offers the lowest cost option and is ideal for scenarios where data is rarely accessed, and there is a minimal input/output operation per second (IOPS) requirement. Workload Suitability: Given that the workload described involves minimal I/O load and a peak IOPS requirement of 50, Tier 5 provides an optimal balance between cost and the minimal performance needed for such an archival workload. Reference from IBM Cloud Professional Architect Materials: IBM documentation on IBM Cloud Storage Tiers indicates that Tier 5 storage is suitable for long-term data storage and archival, where performance requirements are minimal. Other options are incorrect: B . Tier 2 storage, C. Tier 3 storage, and D. Tier 1 storage provide higher performance than necessary for the described archival workload, resulting in potentially unnecessary costs.

Question 15

Which solution is offered by IBM Cloud Internet Services (CIS)?

Accepted Answer

D

Explanation: IBM Cloud Internet Services (CIS) offers a high availability option using range and load balancers. IBM Cloud Internet Services (CIS): CIS provides security, reliability, and performance for internet- facing applications by offering features like DDoS protection, global load balancing, and content delivery. High Availability with Load Balancers: CIS uses global load balancing to distribute traffic across multiple servers or data centers, ensuring high availability and minimizing downtime. The range load balancers provide the flexibility to direct traffic efficiently. Reference from IBM Cloud Professional Architect Materials: As detailed in IBM's CIS documentation, one of the solutions provided is to ensure high availability through the use of load balancers. Other options are incorrect: A . Supporting multi-VLAN and NAT is related to network configuration. B . Protecting public network, private network, and VLAN is more about network security. C . Managing from API and portal with appliance GUI relates to management interfaces, not core CIS functionality.

Free IBM C1000-172 Actual Exam Questions