IBM Cloud Cert
A Public Gateway
- subnet access to the internet, guarded by ACLs
Cloud Native Disadvantages
1. Cloud native apps demand additional toolsets to manage the DevOps pipeline, replace traditional monitoring structures, and control microservices architecture. 2. Cloud native applications allow for rapid development and deployment, but they also demand a business culture that can cope with the pace of that innovation. 3. Rather than one large application, it becomes necessary to manage far more small, discrete services.
What is the maximum number of input/output operations per second (IOPS) of block storage on IBM Cloud? A) 48k B) 8k C) 32k D) 64k
48k
What is IBM Cloud Hyper Protect Crypto Services?
A Single-Tenet key Management service running on Linux the leverages a HSM
What is the main feature of Hyper Protect Crypto Services in IBM Cloud Object Storage? A) Multi-tenet HSM controlled by the client B) Single-tenet HSM controlled by client C) Multi-tenet HSM controlled by cloud D) Single-tenet HSM controlled by cloud
A Single-tenet dedicated HSM that is controlled by the client
IBM VPC
A VPC gives an enterprise the ability to define and control a virtual network that is logically isolated from all other public cloud tenants, creating a private, secure place on the public cloud
What is a Smart Contract in Blockchain?
A set of rules that is implemented in software to define how transactional data is created, read, or updated in a blockchain ledger
Which statement(s) is true of a Cloud Native Application? A) Application always require additional toolsets to manage the DevOps pipeline B) Scaling up or down is easier with the elastic infrastructure C) Application Updates follow a more formal governance process D) Application teams need to schedule maintenance windows for downtime to push updates
A) Application always require additional toolsets to manage the DevOps pipeline B) Scaling up or down is easier with the elastic infrastructure
Which Cloud Foundry benefit enables the ability to automatically increase or decrease the compute capacity of an application? A) Automatic deployment scaling B) Automatic placement C) Extend apps with services D) Automatic health management
A) Automatic deployment scaling
Which IBM Cloud service offers private access to your IBM Cloud infrastructure and to any other clouds linked to your network service provider through your local IBM Cloud data center? A) Direct Link Connect on Classic B) Transient Gateway on Cloud Exchange C) Multi-Cloud Connect on Gen2 D) Cloud Interconnect Service
A) Direct Link Connect on Classic
As workloads are being moved to IBM Cloud, it is determined that to migrate the core application in the portfolio a zSystem will need to be moved in close proximity to the resource in IBM Cloud. Which product would help ensure success? A) Direct Link Dedicated Hosting on Classic B) Direct Link Dedicated on Classic C) Direct Link Exchange on Classic D) Direct Link Connect on Classic
A) Direct Link Dedicated Hosting on Classic
Which group develops international standards that are voluntary, consensus-based, and market relevant to ensure that products and services are safe, reliable and good quality? A) International Organization for Standardization (ISO) B) Cloud Network Alliance (CNA) C) International Traffic in Arms Regulation (ITAR) D) Security Trust of Internet Regulations (STIR)
A) International Organization for Standardization (ISO)
What is the query language that is used with relational databases where data is arranged in tables? A) Java-SQL B) Structured C) Graph D) Access
A) Java -SQL-
Which is an important factor when choosing a multi cloud environment? A) Vendor lock-in B) Application deployment C) CI/CD Deployment methods D) Human Resource Allocation
A) Vendor lock in
Which IBM Cloud service extracts metadata from keywords? A) Watson Natural Language Understanding B) Watson OpenScale C) Knowledge Catalog D) Watson Machine Learning
A) Watson Natural Language Understanding
Event Streams A) message bus built with Apache Kafka. B) Event hosting platform C) Illegal streaming service D) Real-time analytics platform
A) message bus built with Apache Kafka.
Which statement is true about creating Kubernetes clusters in a single zone (data center) location? A) multiple worker nodes can be created but they cannot be spread across zones. The highly available master includes three replicas on separate hosts, but its not spread across zones B) Multiple worker nodes can be created across multiple single-zone regions. The master includes two replicas on separate physical hosts, but is not spread across zones C) The replicas of highly available Kubernetes master are automatically spread across zones. There is an option to spread the worker nodes across zones to protect the apps from a zone failure D) Multiple worker nodes can be created but they cannot be spread across zones. The master includes one node in the selected region.
A) multiple worker nodes can be created but they cannot be spread across zones. The highly available master includes three replicas on separate hosts, but its not spread across zones
Apache Spark (Spark) A) open source data-processing engine for large data sets. It delivers the computational speed, scalability, and programmability required for Big Data—specifically for streaming data, graph data, machine learning, and artificial intelligence (AI) applications. B) Storage Containers meant for small application files C) A database server node D) Cloud computing software platform
A) open source data-processing engine for large data sets. It delivers computational speed, scalability, and programmability required for Big Data—specifically for streaming data, graph data, machine learning, and artificial intelligence (AI) applications.
An organization has been using a home-grown authentication library in their cloud native application. Maintaining the library is costly and they would like to offer users the ability to authenticate using Facebook or Google logins. What IBM Cloud service could they use as a replacement for their authentication library? A) App ID B) Key Protect C) Mobile Foundation D) Identity and Access Management
A. App ID
Which statement accurately describes the Cloud Pak for Applications? A) It helps to accelerate the build of cloud-native apps by leveraging built-in developer tools and processes, including support for microservices and serverless computing. Customers can quickly build apps on any cloud, while existing IBM middleware clients gain the most straightforward path to modernization. B) It helps to unify and simplify the collection, organization and analysis of information. Enterprises can turn data into insights through an integrated cloud-native architecture. It is extensible, easily customized to unique client information and AI landscapes through an integrated catalog of IBM, open source and third-party microservices add-ons. C) It helps support the speed, flexibility, security and scale required for all of your digital integration transformation initiatives, and comes pre- integrated with a set of capabilities including API lifecycle, application and data integration, messaging and events, high speed transfer and security. D) It helps deploy on your choice of clouds, with low-code tools for business users and real-time performance visibility for business managers. Customers can migrate their runtimes without application changes or data migration, and automate at scale without vendor lock-in.
A. It helps to accelerate the build of cloud-native apps by leveraging built-in developer tools and processes, including support for microservices and serverless computing. Customers can quickly build apps on any cloud, while existing IBM middleware clients gain the most straightforward path to modernization.
What type of analysis does Streaming Analytics perform on data in motion as part of IBM Cloud applications? A) Real-time analysis B) Predictive analysis C) Prescriptive analysis D) A synchronous analysis
A. Real-time analysis
Which statement is true regarding IBM Cloud Foundry Enterprise Environment? A) The service runs on Kubernetes containers B) The worker node is multi-tenant to the customer C) The instance has three hardware options to be deployed D) The instance requires a minimum of four Cloud Foundry cells
A. The service runs on Kubernetes containers
Which configurable component of a VPC acts like a virtual firewall, protecting virtual server instances (VSIs)? A) A security group B) An access control list (ACL) C) A public gateway D) A zone
Access Control List (ACL)
What is used to assign multiple users the same privileges on a resource under Identity and Access Management? A) Security Groups B) Resource Groups C) Access Group D) Services Group
Access Groups
Which Statement describes the Cognos Dashboard Embedded Service? A) It is built on Db2 Warehouse to surface insights from dark data B) An API-based solution delivered as a plug-in for rich client applications C) a SaaS solution that offers pre-built dashboard to support data visualization D) An API based solution that lets developers easily add end-to-end data visualization capabilities to their apps
An API based solution that lets developers easily add end-to-end data visualization capabilities to their apps
What is Kubernetes?
An open-source container orchestration system for automation and deployment
Which two concepts explain the purpose of IBM Cloud Identity and Access Management? A) Control access to resources B) Authenticate users for platform services C) Monitor resource access D) OpenAM access management E) Multi-cloud access
Authenticate users and control access to resources
What is Veeam in IBM Cloud? A) Enhanced data encryption in block storage B) A backup solution for VMware C) Automated virtual machine build/config D) FIPS Level 3 compliant HSM
B) A backup solution for VMware
What functionality does Zerto provide? A) Container orchestration within OpenShift B) A flexible and scalable disaster recovery solution for VMware C) Identity federation that allows for single sign on to IBM Cloud D) Configurable monitoring dashboards for Cloud Foundry apps
B) A flexible and scalable disaster recovery solution for VMware
An organization wants to enable their VPC virtual server instances on a particular subnet to access the internet so that they can perform operating system updates. What is required? A) An internet facing load balancer B) A public gateway C) A floating IP address D) An ACL rule that allows ingress on port 22
B) A public gateway
A team has developed a complex Kubernetes application. What package manager can be used to define , install, and upgrade the application in the IBM Kubernetes Service? A) Puppet B) Helm C) Chef D) Ansible
B) Helm
Which of the following accurately describes Cloud Pak for Security? A) Uses low-code tools for business users with real time performance visibility B) Helps uncover hidden threats, make informed decisions about the risks posed with a fast response C) Consistent visibility, automation, and governance across a multi-cloud environment D) It helps support the speed, flexibility, security and scale required for all your digital integration initiatives
B) Helps uncover hidden threats, make informed decisions about the risks posed with a fast response
What would be a typical use case for multiple zones in a given region? A) Application migration B) High availability C) Data conversions D) Detailed monitoring reporting
B) High availability
What is Istio? A) Open source software B) Traffic management, security, and observability solution C) VMWare solution D) A storage database application
B) Traffic management, security, and observability solution
Which machine type is most suited for high performance applications that need more resources and are billed monthly when used to create a cluster for Red Hat OpenShift? A) Virtual Advanced B) Virtual Dedicated C) Virtual Shared D) Bare Metal
Bare Metal
Which two support plans are available with IBM Cloud Pay-as-you-go and/or Subscription accounts? A) Red Star B) Platinum C) Advanced Plus D) Basic E) Premium
Basic and Premium
An organization would like to increase customer engagement by sending push notifications. They also want to progressively improve customer engagement by analyzing responsiveness. Which IBM Cloud mobile services can the organization use? A) Mobile App with push notifications B) UnificationEngine C) Mobile Push Notifications D) Mobile Foundation
C) Mobile Push Notifications
An IBM Cloud VPN connection from a location to a private network allow for which of the following? A) In-band management B) Portal Management C) Out-of-band management D) Clear Stream Traffic
C) Out-of-band management
What is an advantage of using Cloud Paks on IBM Cloud? A) Cloud Paks are discounted for IBM customers B) Cloud Paks are only available from the IBM Cloud catalog in the IBM Cloud console and licenses must be exported for use elsewhere C) Streamlined deployment of Cloud Paks into Red Hat OpenShift clusters D) IBM Cloud supports all container platforms that IBM Cloud Paks can be installed on, allowing for a wider range of solutions
C) Streamlined deployment of Cloud Paks into Red Hat OpenShift clusters
Which IBM Cloud Service Converts written text into natural-sounding audio in a variety of languages and voices? A) Watson Speech to text B) Voice Agent with Watson C) Watson Text to Speech D) Watson Polly
C) Watson Text to Speech
MQ A) Machine learning algorithm B) Lightning fast data processing application C) enterprise grade messaging middleware service that gives independent and potentially non-concurrent applications secure messaging capabilities
C) enterprise grade messaging middleware service that gives independent and potentially non-concurrent applications secure messaging capabilities,
A business is building a new platform which will host a number of new automated business processes. These processes must be able to share/transfer data with a number of existing systems, many of which will need to use secured gateways and strict encryption. Which IBM Cloud Pack would be most appropriate in this scenario? A) Cloud Pak for Applications B) Cloud Pak for Security C) Cloud Pak for Automation D) Cloud Pak for Integration
C. Cloud Pak for Automation
What architecture constraint needs to be considered when developing a containerized Cloud Native application? A) SOA principles B) IT Service Management (ITSM) C) DevOps toolchain D) Data Persistence
C. DevOps Toolchain
When using IBM Cloud Hyper Protect Crypto Services, what happens when an encryption key is deleted? A) Data can only be decrypted if the user has a special token B) The key can be recovered so that data becomes usable again C) Protected data is no longer useable regardless of the application that stores it D) The service decrypts protected data, automatically generates a new key and uses the new key to re-encrypt the data
C. Protected data is no longer useable regardless of the application that stores it
In the IBM Kubernetes Service, how can the number of worker nodes be increased when a resource requests needs additional worker nodes? A) The ansible recipe B) The pod helm chart C) The cluster autoscaler D) The cluster terraform provider
C. The cluster autoscaler
What is a Private Cloud?
Cloud Environment operated solely for a single organization. Managed internally or by a third-party. Hosted either internally or externally
API Connect
Create, expose, manage APIs tools for registering and managing existing gateways located on-premises and on third-party clouds.
What should an organization use if they need to implement policy-based security for a set of APIs created and running on App Connect A) APP ID B) Alloy C) Accern- API D) API Gateway
D) API Gateway
An organization needs a business-friendly tool that integrates cloud-based applications to automate tedious and repetitive tasks. What IBM Cloud offering could the organization use? A) MQ B) API Connect C) Event Streams D) App Connect
D) App Connect
What are the functions that can be done with IBM Cloud Hyper Protect DBaaS on databases? A) Provision, manage, maintain, and monitor databases B) Data Encryption C) Add and delete databases D) Data encryption, monitor and event logging
D) Data encryption, monitor and event logging
Which statement is true regarding IBM Cloud for VMware Solutions - VMware vSphere? A) It provides an OpenStack Cloud delivered on VMware vSphere B) It provides multi-tenet virtual desktop deployment with rapid scalability C) It includes the automatic deployment and config of OpenStack D) It is used to scale out an existing cluster of ESXi servers in an IBM Cloud data center
D) It is used to scale out an existing cluster of ESXi servers in an IBM Cloud data center
What is the benefit of IBM Cloud Foundry Enterprise Environment over Public Cloud Foundry? A) It performs traffic management in your IBM Cloud account B) It provides powerful scaling in your IBM Cloud account C) It accesses all IBM Cloud services in your account D) It provides an isolated, single-tenet environment in your IBM Cloud account
D) It provides an isolated, single-tenet environment in your IBM Cloud account
Where can Cloud Paks be deployed? A) On-prem and on IBM Cloud only B) Any public cloud platform or pre-integrated systems only C) IBM Cloud Only D) On-prem, private or public cloud, and pre-integrated systems
D) On-prem, private or public cloud, and pre-integrated systems
Which managed offering on IBM Cloud provides a cluster of computer hosts to deploy and manage containerized applications? A) Kibana B) Cloud Foundry C) IBM Cloudant D) Red Hat OpenShift
D) Red Hat OpenShift
What feature of IBM File Storage can protect against permanent data loss if a user accidentally modifies or deletes crucial data from a volume? A) Protector Vaults B) Routine Backups C) Auto backups D) Snapshots
D) Snapshots
What characteristic will provide optimal results when choosing a workload to deploy on IBM Kubernetes Service? A) Workloads that require high IO B) Workloads that have a need for static resources C) Workloads that have a need for kernel space drivers D) Workload that benefits from dynamic scaling
D) Workload that benefits from dynamic scaling
Mobile Foundation A) App access on mobile devices B) The network foundation of mobile devices C) A mobile software offering D) an integrated set of backend capabilities for Mobile, Web, and Progressive Web Apps (PWA) - Live Updates
D) integrated set of backend capabilities for Mobile, Web, and Progressive Web Apps (PWA) Live Update capability
Which statement is true regarding IBM File Storage? A) IBM File Storage buckets can be directly accessed via an API. B) Cloud Object Storage and IBM File Storage are different names for the same service C) A user can only provision IBM File Storage at the same time as provisioning a server. D) IBM File Storage can be attached to and accessed by multiple servers at the same time.
D. IBM File Storage can be attached to and accessed by multiple servers at the same time
Block Storage on IBM Cloud is accessed via which type of interface? A) File Transfer Protocol (FTP) B) Network Attached Storage (NAS) C) General Parallel File System (GPFS) D) Internet Small Computer Systems Interface (iSCSI)
D. Internet Small Computer Systems Interface (iSCSI)
What is the importance of compliance standards and regulations in IBM Cloud? A) Government security and operational requirements B) Monitors security compliance of network operations C) Provides an auditing report of data privacy violations D) Protect customer data and applications across networks and infrastructure
D. Protect customer data and applications across networks and infrastructure
Which virtual servers in the IBM Cloud are offered at a reduced cost and best suited for flexible workloads? A) Public B) Reserved C) Dedicated D) Transient
D. Transient
Which IBM Cloud Virtual Servers offering provides maximum control over workload placement and flexible post-provisioning options? A) Dedicated B) Reserved C) Transient D) Public
Dedicated
What is the software platform for building and running containers? A) Kubectl B) Dockerfile C) Vsphere D) PaaS
Dockerfile (open source)
Which are two key benefits of VPC Gen2 over VPC Gen1? A) The VPC can use zones from multiple regions B) The availability of dedicated hardware load balancers C) Worker nodes are automatically regenerated if they fail D) Faster provisioning times E) Improved Network performance of up to 80GBps
Faster provisioning times and Improved Network performance of up to 80GBps
Federal Government Standards
FedRAMP and ITAR
Regional standards
GDPR/DSGVO - harmonised data protection law framework across the EU and aims to give back to data subjects, control of their personal data, whilst imposing strict rules on those hosting and processing this data, anywhere in the world
Which IBM Cloud for VMware solutions add-on service extends the networks of on-prem data centers into IBM Cloud A) HCX B) KMIP C) F5 BIG-IP D) Veeam
HCX
Industry Standards
HIPAA and PCI
Which tool is a scalable JSON document database optimized for web, mobile, IoT and server less applications? A) IBM Cloudant B) Cloud Databases for Redis C) Compose for JanusGraph D) Db2 Warehouse on cloud
IBM Cloudant
What tool is used to control access to IBM Cloud Object Storage? A) IBM Cloud Identity and Access Management (IAM) B) IBM Cloud User Management Access (UMA)
Identity and Access Management (IAM)
Single Zone Cluster
If your cluster is created in a single zone city, the Kubernetes master of your classic cluster is highly available and includes replicas on separate physical hosts for your master API server, etcd, scheduler, and controller manager to protect against an outage such as during a master update
Multi zone Cluster
If your cluster resides in one of the multizone metro locations, the master is automatically deployed with three replicas and spread across the zones of the metro. To convert a single zone cluster to a multizone cluster, your cluster must be set up in one of the supportedmultizone metro locations
IBM Cloud Pak for Integration
It helps support the speed, flexibility, security and scale required for all of your digital integration transformation initiatives and comes pre-integrated with a set of capabilities including API lifecycle, application and data integration, messaging and events, high speed transfer and security
IBM Cloud Pak for Data
It helps to provide consistent visibility, automation, and governance across a range of hybrid and multi cloud capabilities such as event management, infrastructure management, application management, multi-cluster management, edge management and integration with existing tools and processes
Which statement is true regarding IBM Cloud for VMware Solutions - vCenter Server? A. It is designed for proof of concept (POC) or sandbox testing instances only B. It is a hosted private cloud that delivers the VMware vSphere stack as a service C. It is a streamlined and optimized ordering platform for VMware D. It allows maximum of flexibility to design and build a hosted VMware environment
It is a streamlined and optimized ordering platform for VMware
What Is IBM Garage?
Method for Discovering a new value stream Co-create (Discover/Envision), co-execute (Develop/Reason), co-operate(Operate/Learn)
Distinguish the features/capabilities of Push Notifications vs. Mobile Foundation.
Mobile Foundations - integrated platform that helps you extend your business to mobile devices Push Notifications - provides a unified push service to send real-time notifications to mobile and web applications. The service provides the ability to personalize and send notifications to a segment of users, single fuser or broadcast to all users.
What are two benefits of security in DevSecOps? A) Staging B) Magic C) Observability D) Mutation E) Compliance
Observability and Compliance
What are two PaaS platforms supported by IBM Cloud? A) OpenShift B) Mesos C) Cloud Foundry D) Red Hat Ansible E) Docker Enterprise Edition
OpenShift and Cloud Foundry
What is an IBM Cloud Support Plan Tier? A) Advanced Plus B) Enterprise C) Platinum D) Premium
Premium
Which IBM Cloud Virtual Servers offering is multi-tenant with pre-defined sizes? A) Public B) Transient C) Dedicated D) Reserved
Public
In which cloud offering is the cloud provider managing all layers from the network up to and including the application? A) SaaS B) IaaS C) PaaS D) Traditional IT
SaaS
Security Group
Security Groups can control the traffic at the virtual server instance (VSI) level / A security group acts as a virtual firewall that controls the traffic for one or more virtual server instances
What are two characteristics of Microservices? A) All services are redeployed during application updates B) Services for the application must be scaled in tandem C) Services are server-side system based for a single application D) Services in a Microservice architecture are independently deployable E) Services communicate via APIs
Services in a Microservice architecture are independently deployable and Services communicate via APIs
VSI Internet access
Set up a floating IP for internet access
Which two of the following are IBM Cloud Account types? A) Subscription B) Free C) Professional D) Pay-as-you-go E) Trial
Subscription and Pay-as-you-go
Which statement regarding the prices shown in the cost estimator tool is true? A) The price shown is the actual cost per month if the selected catalog items are provisioned B) The price shown is the minimum amount monthly that will be charged C) The cost estimator anticipates operational fluctuations and improves its accuracy the longer it is used D) The price shown is not final and is subject to change
The price shown is the actual cost per month if the selected catalog items are provisioned (ie. bare metal servers) where others can be charged by runtimes/ gbps
IBM Cloud Expert Services
This service can help you modernize and deploy your business in a flexible and secure platform by adopting VMware on IBM Cloud
HCX
This service can seamlessly extend the networks of on-premises data centers into IBM Cloud
F5 BIG-IP
This service provides intelligent L4-L7 load balancing and traffic management services
Zerto
This service provides replication and disaster recovery capabilities
IBM Kubernetes Service registry
To run your app in Kubernetes on IKS, you must first containerize your app by creating a container image that you store in a container registry.] - An image registry is a place to store, retrieve, and share container images
Why would an organization use a hardware security module (HSM)? A) To securely manage, process, and store cryptographic keys inside a hardened, tamper-resistant device B) To perform hardware accelerated intrusion detection C) They want an edge device to provide Denial-of-Service protection and Transport Layer Security
To securely manage, process, and store cryptographic keys inside a hardened, tamper-resistant device
What are two features of a toolchain in IBM Cloud DevOps? A) Zones B) Images C) Roles D)Templates E) Tool Integrations
Tool integrations and templates
Which servers in IBM Cloud are only available as hourly instances? A) Bare metal servers B) Reserved virtual servers C) Transient virtual servers D) Hyper Protect virtual servers
Transient Virtual Servers (could be public if not available)
VPC to VPC Connectivity
Use IBM Cloud Transit Gateway for VPC-to-VPC connectivity you can use VPN Gateway
Which of these two have a hypervisor? A) Virtual Machines B) Container
Virtual Machines
ISO
an independent, non-governmental organization with a membership of 164 national standards bodies; develops international standards that are voluntary, consensus-based, and market relevant.
App Connect
connect your different applications and make your business more efficient giving you the flexibility to create integrations without writing a single line of code
API Connect
create, securely expose, manage and monetize APIs across clouds
SOC
developed by the American Institute of Certified Public Accountants (AICPA), is a standard for controls that protect information stored in the cloud. CPAs audit cloud service providers (CSPs), resulting in internal control reports on the services provided by a service organization; reports can help users assess and address the risks associated with an outsourced service.
IBM Cloud Pak for Apps
enterprise-ready, containerized software solution for modernizing existing applications and developing new cloud-native app
Event Streams
high-throughput message bus built with Apache Kafka - Integrations with services such as the Watson IoT Platform
Vsphere
hosted private cloud that delivers the VMware vSphere stack as a service
IBM Cloud Pak for Automation
look for "Low Code" - robust, end-to-end solution for business automation needs within the clients' enterprise; delivers an integrated and managed collection of containerized or virtualized Automation Platform for Digital Business services that enable rapid deployment and reduce operational costs; digitizes all aspects of business operations and can extend the workforce with digital labor to enable businesses to scale..
Push Notifications service
provides a unified push service to send real-time notifications to mobile and web applications
IBM Cloud Pak for Multicloud Management
provides consistent visibility, governance, and automation from on premises to the edge; capabilities such as multicluster management, event management, application management and infrastructure management.
Veeam
you can directly control both the backup and restoration of all virtual machines