IBM C1000-172 Exam Dumps

When deploying an application to an IBM Cloud OpenShift cluster that requires persistent storage across zones within a region, Portworx and Block Storage are viable options.

Portworx: This is a cloud-native storage solution designed for containerized environments like Kubernetes and OpenShift. Portworx provides highly available, scalable, and persistent storage that spans multiple zones within a region, ensuring data redundancy and availability.

Block Storage: IBM Cloud Block Storage provides persistent, high-performance storage that can be attached to virtual servers or containers. It is designed to offer cross-zone availability when configured with the necessary replication and redundancy settings.

Comparison with Other Options:

A (Kubernetes local volume storage): Not suitable for spanning multiple zones as it is tied to specific nodes.

B (Object Storage): Designed for storing large amounts of unstructured data; it is not typically used for persistent storage in Kubernetes.

D (NetApp on Tap): Primarily used for network-attached storage and might not be optimized for persistent storage across multiple zones in OpenShift.

IBM Cloud Block Storage Documentation

Portworx on IBM Cloud

IBM Cloud Architect Exam Study Guide

IBM Cloud Schematics is an Infrastructure as Code (IaC) tool that uses Terraform to create, update, and manage cloud resources. To horizontally scale resources using IBM Cloud Schematics, a user should add the necessary resources (such as additional virtual machines or instances) by updating the Terraform configuration files and applying those changes through Schematics.

How Scaling is Achieved with IBM Cloud Schematics: Users can modify their existing infrastructure definition to add new resources or adjust their configurations. These modifications can be made in the Terraform files that are managed by Schematics. After the modifications, users apply the updated configuration to scale resources horizontally (e.g., adding more instances to a resource pool).

Why IBM Cloud Schematics is the Correct Choice: Schematics manages infrastructure as code, which is a more reliable, repeatable, and controlled way to manage changes and scale resources compared to manual methods such as CLI.

Comparison with Other Options:

A (Add using CLI): Possible but not as efficient or manageable as using Schematics.

C (Destroy resources using Console): Irrelevant to scaling.

D (Destroy all and recreate): Not a practical or recommended approach for scaling.

IBM Cloud Schematics Documentation

IBM Cloud Architect Exam Study Guide

The capabilities of IBM Cloud Block Storage for VPC are:

Stores Volume Data Redundantly Across Multiple Physical Disks in an Availability Zone: IBM Cloud Block Storage is designed to provide redundancy and durability by storing data across multiple physical disks within the same availability zone. This ensures data availability and protection against disk failures.

Provides Primary Boot Volumes and Secondary Data Volumes: Block Storage in IBM Cloud VPC can be used as both primary boot volumes for the operating system and secondary data volumes for storing additional data.

Reference from IBM Cloud Professional Architect Materials:

IBM documentation on IBM Cloud Block Storage for VPC outlines these capabilities, including redundant data storage and support for both boot and data volumes.

Other options are incorrect:

A . Provides a highly available, durable, and secure platform for storing unstructured data describes object storage, not block storage.

C . Provides storage in a separate zone is incorrect; storage is typically within the same zone as compute resources.

E . Provides fast, flexible network-attached, NFS-based storage describes a different type of storage.

Therefore, the correct answers are B. Stores volume data redundantly across multiple physical disks in an availability zone and D. Provides primary boot volumes and secondary data volumes.

IBM API Connect offers both authentication and authorization capabilities to secure APIs using OAuth and OpenID.

IBM API Connect Security Features: IBM API Connect provides built-in capabilities for managing OAuth and OpenID Connect authentication and authorization flows. It allows users to define security policies that enforce these protocols to protect APIs.

Use of OAuth and OpenID: API Connect enables organizations to create user registries, apply security policies, and manage tokens for OAuth 2.0 and OpenID Connect, providing end-to-end security management for APIs.

Reference from IBM Cloud Professional Architect Materials:

IBM documentation on API Security in IBM API Connect confirms that API Connect handles both authentication and authorization for securing APIs.

Other options are incorrect:

B . IBM API Connect APIs must be secured by a third party is false; API Connect itself provides these capabilities.

C . IBM API Connect is providing authentication, but authorization can be provided by IAM is incorrect because API Connect manages both.

D . IBM API Connect creates user registries, but OAuth isn't allowed is incorrect; OAuth is fully supported.

A security feature of IBM Cloud VPN for virtual private cloud (VPC) service is Perfect Forward Secrecy (PFS).

Perfect Forward Secrecy (PFS): PFS ensures that the compromise of one session key does not compromise the confidentiality of past sessions. It provides additional security for encrypted communications by generating unique keys for each session, making it a critical feature for VPN services.

IBM Cloud VPN for VPC: This service utilizes PFS to secure communication between the cloud environment and external networks, ensuring high levels of data protection and encryption.

Reference from IBM Cloud Professional Architect Materials:

The IBM documentation on IBM Cloud VPN describes PFS as a fundamental security feature for protecting data transmitted over the network.

Other options are incorrect:

A . Passive Peer Detection is not a security feature.

B . RSA key exchange is a cryptographic algorithm but does not describe a VPN-specific security feature.

D . Post-shared key is not a relevant term.