C1000-172 Practice Questions

To deploy microservices where container communication can be orchestrated and customized, the

best IBM Cloud solution is the IBM Cloud Kubernetes Service.

IBM Cloud Kubernetes Service: This service provides a managed Kubernetes environment to

orchestrate and manage containerized applications. It supports microservices architecture by

providing tools for managing container communication, scaling, deployment, and load balancing.

Kubernetes allows for custom networking policies, service meshes, and other tools necessary for

microservices communication and orchestration.

Microservices and Kubernetes: Kubernetes is designed to manage and scale microservices. It can

handle the orchestration of complex, interdependent services and provides features such as service

discovery, traffic routing, load balancing, and monitoring.

Reference from IBM Cloud Professional Architect Materials:

IBM documentation on IBM Cloud Kubernetes Service confirms its suitability for managing

microservices architecture with container orchestration capabilities.

Other options are incorrect:

B . IBM Cloud Code Engine is a serverless platform, not specifically designed for microservices

orchestration.

C . IBM Cloud for VMware Solutions is used for running VMware workloads in the cloud.

D . IBM Cloud Functions is used for running serverless functions, not for orchestrating containers.

The Global Routing option of IBM Cloud Direct Link offers private network connectivity to IBM Cloud

services across multiple regions.

IBM Cloud Direct Link: This service provides dedicated private network connectivity from your on-

premises environment to the IBM Cloud. The Global Routing option allows data to be transmitted

securely across multiple IBM Cloud regions, ensuring low latency and high-speed connectivity for

global deployments.

Global Connectivity: With the Global Routing option enabled, organizations can connect to IBM

Cloud services in multiple regions without needing separate connections for each region, simplifying

network management and improving performance.

Reference: This capability is documented in the IBM Cloud Direct Link service documentation, which

highlights the advantages of the Global Routing option for multi-region connectivity.

Other options are incorrect:

A . Public Routing option does not provide private network connectivity.

C . Semi Private Routing option is not a recognized option.

D . Private Routing option offers connectivity within a single region rather than multiple regions.

IBM Cloud Direct Link utilizes Layers 2 and 3 of the OSI model.

Layer 2 (Data Link Layer) and Layer 3 (Network Layer): IBM Cloud Direct Link provides private

connectivity from an on-premises data center to the IBM Cloud through dedicated connections. At

Layer 2, it provides direct network paths, while at Layer 3, it handles routing between networks.

Direct Link Functionality: Direct Link offers high-performance, secure connectivity options for hybrid

cloud solutions, making it an essential service for enterprises that require a secure and efficient

connection to the IBM Cloud.

Reference from IBM Cloud Professional Architect Materials:

The IBM Cloud Direct Link documentation specifies that it operates at OSI Layers 2 and 3 to provide

dedicated connectivity options.

Other options are incorrect:

B . Layers 1 thru 7 encompasses all OSI layers, which is incorrect.

C . Layers 3 and 4 include the transport layer, which Direct Link does not utilize directly.

D . Layers 1 and 2 omits Layer 3, which is crucial for network routing.

IBM Cloud Hyper Protect Crypto Services is built on FIPS 140-2 Level 3-certified hardware.

FIPS 140-2 Level 3 Certification: This level of certification ensures that the hardware used by IBM

Cloud Hyper Protect Crypto Services provides a high degree of security, including physical tamper-

resistance and the use of strong encryption protocols.

IBM Hyper Protect Crypto Services: These services leverage Hardware Security Modules (HSMs) that

meet the FIPS 140-2 Level 3 certification. The HSMs provide a secure environment for key

management and cryptographic operations, which is critical for meeting stringent regulatory and

compliance requirements.

Reference from IBM Cloud Professional Architect Materials:

Detailed information on IBM Cloud Hyper Protect Crypto Services and its use of FIPS 140-2 Level 3-

certified hardware can be found in IBM documentation on IBM Cloud Hyper Protect Crypto Services.

Other options are incorrect:

B . NIST 140-2 Level 5-certified hardware and D. NIST 140-2 Level 2-certified hardware are not valid

terms.

C . FIPS 140-2 Level 4-certified hardware would be a higher certification level than is currently used.

The feature of Cloud Internet Services (CIS) being discussed is Security.

CIS Security Features: IBM Cloud Internet Services provides robust security measures to protect

internet-facing applications from a variety of attacks, including Distributed Denial of Service (DDoS),

data theft, and bot attacks. These services are crucial for securing applications and data in the cloud.

Protection Mechanisms: CIS integrates multiple layers of security features, such as Web Application

Firewall (WAF), DDoS protection, and threat intelligence, which work together to secure applications

from cyber threats.

Reference from IBM Cloud Professional Architect Materials:

The IBM Cloud Internet Services documentation highlights the focus on security to protect

applications from DDoS attacks, data breaches, and other threats.

Other options are incorrect:

B . Performance relates to speed and efficiency, not protection.

C . Reliability deals with system uptime and consistency.

D . Scalability is about handling increased load, not security.

File Storage (Classic) on IBM Cloud allows users to adjust the performance as needed by choosing

different tiers or adjusting the input/output operations per second (IOPS). This flexibility makes it

suitable for workloads with varying performance requirements, such as databases, analytics, or

content management systems, where the storage performance can be adjusted to match the

workload demand.

Performance Adjustability: Users can choose between various performance levels or make

adjustments to IOPS, allowing them to balance cost and performance based on current needs.

Why File Storage (Classic)? This flexibility makes File Storage (Classic) suitable for dynamic workloads

that require changes in performance over time, such as during peak usage periods.

Comparison with Other Options:

Protects against data in transit failures (B) is not a primary feature of File Storage.

Scalable during provisioning (C) is partially correct, but "adjusting performance" is more precise.

Asynchronous reads and writes (D) are general file system features, not unique to IBM Cloud File

Storage.

Reference:

IBM Cloud File Storage Documentation

IBM Cloud Architect Exam Study Guide

Databases for Db2 is an IBM Cloud database service that supports both relational and non-relational

data querying.

IBM Cloud Databases for Db2: Db2 on IBM Cloud is a managed database service that supports both

relational and non-relational models. It provides JSON and SQL querying capabilities, allowing users

to store and retrieve data in a flexible manner. This makes it capable of handling structured, semi-

structured, and unstructured data, thus supporting both relational and non-relational data formats.

Support for Multiple Data Types: Db2's multi-model database capabilities enable the execution of

SQL queries on relational data and the storage/retrieval of JSON documents, effectively allowing it to

function in both relational and non-relational scenarios.

Reference from IBM Cloud Professional Architect Materials:

According to IBM's documentation on IBM Cloud Databases for Db2, it supports a broad range of

workloads and use cases, including transactional (relational) and operational (non-relational)

workloads, making it suitable for both SQL and NoSQL data models.

The other options are incorrect because:

A . Databases for Redis is a key-value store optimized for in-memory data.

C . Databases for PostgreSQL is strictly a relational database.

D . Databases for etcd is a key-value store primarily used for configuration management.

To achieve a high availability strategy with a target of four nines (99.99%) for an IBM Kubernetes

Services cluster, you need to deploy multiple worker nodes across at least three availability zones

within a single region. This configuration ensures that even if one or two zones experience failures,

the cluster remains operational, thus meeting the 99.99% uptime objective.

High Availability in IBM Cloud Kubernetes Service: Deploying worker nodes across multiple

availability zones provides redundancy and fault tolerance. By having at least three zones, the

Kubernetes cluster can tolerate failures in up to two zones while still maintaining functionality.

Comparison of Options:

A (Single worker node in a single zone): Insufficient for high availability as any zone failure would

result in downtime.

B (Multiple nodes in a single zone): Provides redundancy but still vulnerable to zone-wide outages,

not meeting 99.99% uptime.

C (Multiple nodes in at least three zones across multiple regions): While this offers high availability, it

exceeds the requirements stated for achieving 99.99% within a single region.

Reference:

IBM Kubernetes Service Documentation

IBM Cloud High Availability Best Practices

IBM Cloud Architect Exam Study Guide

IBM Cloud Transit Gateway provides network connectivity between different IBM Cloud Virtual

Private Clouds (VPCs). It allows for secure, scalable, and efficient communication between resources

deployed in separate VPCs, whether they are within the same region or across different regions.

How Transit Gateway Works: It acts as a central hub that facilitates the routing of traffic between

multiple VPCs without the need to configure individual VPC peering connections. This simplifies

network management, improves scalability, and enhances security by maintaining a single point of

control.

Benefits of Transit Gateway: This service supports both private and public connectivity options and

allows for routing policies that can be customized according to business needs. It also provides

seamless integration with other IBM Cloud services and third-party networks.

Comparison of Other Options:

Domain Name System (A): Not used for network connectivity between VPCs.

Direct Link (B): Used for dedicated, high-speed connections from on-premises to IBM Cloud but not

between VPCs.

Power Edge Router (D): Not an IBM Cloud service for inter-VPC connectivity.

Reference:

IBM Cloud Transit Gateway Documentation

IBM Cloud Networking Solutions

IBM Cloud Architect Exam Study Guide

Instance Groups are used to allow provisioning of a large number of virtual server instances at the

same time when using IBM Cloud Virtual Private Cloud (VPC).

IBM Cloud VPC Instance Groups: Instance Groups provide a way to manage a group of identical

virtual server instances within a VPC. They support auto-scaling, load balancing, and rolling updates,

making it easier to manage a large number of instances.

Use Case for Large Deployments: When an organization needs to deploy multiple instances

simultaneously, Instance Groups simplify the process by providing a template and scaling policies.

Reference from IBM Cloud Professional Architect Materials:

IBM documentation on Instance Groups for VPC describes how they are used for managing large-

scale deployments.

Other options are incorrect:

A . Instance Models refer to the types or configurations of instances, not to mass provisioning.

B . Instance Replication Policies do not exist in this context.

D . Instance Scaling Policies manage scaling but are not used for the initial provisioning of multiple

instances.