How can a container image with a known but otherwise mitigated security issue detected by the Vulnerability Advisor be provisioned onto an IBM Cloud Kubernetes Service?
- A . Edit the default policies of the Container Image Security Enforcement feature to allow the image to be deployed
- B . Edit the Kube-system ImagePolicy in IBM Cloud
- C . Create a ClusterlmagePolicy object and apply to the cluster
- D . Permit image repositories by using IBM-system policy
In the context of cloud-native, what is the principle of Immutability?
- A . Images incorporate all settings required to pass resource requirements to the platform
- B . After images are built, they do not change across different environments
- C . The code base is managed using source code control as part of a robust lifecycle
- D . Containers are ephemeral and can be replaced by new instances
A developer is starting a new microservices project in an organization that uses a corporate framework for all projects, containing some standard configurations for best practices and compliance and located in an enterprise GitHub repository. This framework can be updated over time and projects can contribute with its evolution by submitting code changes.
To create a development environment, this developer is creating a toolchain in IBM Cloud, using the Continuous Delivery service, and the first tool added is GitHub. On the configuration page, the developer must configure the repository type to use in the toolchain.
Considering the above scenario, what option must be selected?
- A . The developer must select the "Existing" option
- B . The developer must select the Clone" option
- C . The developer must select the ‘Fork" option
- D . The developer must select the ‘New" option
A Mobile application developer is using IBM Mobile Foundation for the backend services. The application end users need access to the application data even when there is no network and the application is running offline.
Which of the following IBM Mobile Foundation features will help in this scenario?
- A . JSONStore
- B . Mobile Foundation SDK
- C . AES 256 encryption and Data storage
- D . Mobile Foundation Adapters
IBM Cloud Activity Tracker with LogDNA events can be used to perform which action?
- A . Monitor Application logs
- B . Check Pod usage
- C . Check the criticality of an action
- D . Monitor Network traffic
A developer is building an application on IBM Cloud that needs a token-based OAuth authorization protocol and mutual TLS as a security feature when making calls to IBM Messaging Queue Service.
Which application integration service should the developer use?
- A . IBM Key protect for Message Queues
- B . IBM API Gateway
- C . IBM Developer toolkit Loopback application
- D . IBM API Connect Transport Layer Security (TLS)
A developer has been asked to create a website which needs user authentication using ApplD. Aside from federation, what service resides in ApplD to authenticate users?
- A . IBM Security Key Lifecycle Manager
- B . OlDC Repository
- C . SAML
- D . Cloud Directory
Which of the following is the benefit of IBM API Connect Developer Portal?
- A . Create different version of API
- B . Create Application and subscribes to IBM cloud catalog
- C . Analyze API usage
- D . Onboard new API mobile users
The IBM Cloud Object Storage S3 compatible API is a REST-based API for reading and writing objects.
What kind of credential needs to be generated to authenticate to the S3 API?
- A . HMAC
- B . SSL
- C . SSH
- D . IAM API Key
A
Explanation:
https://cloud.ibm.com/apidocs/cos/cos-compatibility
Which of the following is an open-source container orchestration platform that allows users to automate deployment, scaling, and management of their containerized applications with ease?
- A . Helm
- B . Kubernetes
- C . Watson
- D . Red Hat
An application developer is working on an application on IBM Cloud that needs to connect to SalesForce and watch for event changes in real time.
Which of the following IBM Integration tools should the application developer leverage?
- A . API Gateway
- B . Lift CLI
- C . API Connect
- D . App Connect
Which two of the following types of entities can be added to an Access Group when using IBM Cloud Identity and Access Management?
- A . Users
- B . Service IDs
- C . Policies
- D . Roles
- E . API keys
A DevOps team is provisioning environments in IBM Cloud during the development lifecycle.
What can be done to optimize the environment provisioning process?
- A . Use Schematics service in IBM Cloud to create infrastructure as code templates and use the on DevOps pipeline to create and configure environments
- B . Use Chef scripts in the DevOps pipeline to create configuration tasks for application containers
- C . Use Virtual Machine templates in IBM Cloud to define environment configuration and start/stop them as needed
- D . Use Bare Metal Servers to configure the environments and have full control of them
Which two of the following are benefits of Cloud Functions?
- A . Scaling up or down automatically
- B . Invoke SQL queries on objects stored on Cloud Object Storage
- C . Low-code/no-code graphical development environment
- D . Support for
- E . C++ and R runtimes
- F . Focus on code, not infrastructure
What are the core functionalities for IBM Cloud Pak for Automation?
- A . API lifecycle Management. Enterprise Messaging, Digital Workers
- B . Content Management. Workflow. Decisions
- C . Capture. Digital Workers. Enterprise Messaging
- D . Workflow. Decisions. API lifecycle Management
For a DevOps team, one of the most Important capabilities is Continuous Feedback.
On a team using IBM Garage method, what Continuous Feedback technique can be used collect user feedback on new features developed by the team?
- A . A / B test can be used to deploy two different version of a feature in production and monitor how users interact with them
- B . A continuous deployment tool can be used to alternate the application version in production environment and monitor their usage by users
- C . A design thinking session can be used to define the personas and collect their feeling about new features developed
- D . Blue / Green deployment can be used to deploy two different versions of application at same time and collect data on how users are using them
Which of the following workloads fits the IBM Cloud Functions processing model?
- A . Complex business processes
- B . High-volume, independent, parallel workloads
- C . Distributed business transactions
- D . Low latency workloads
What does the IBM Cloud Virtual Server Auto Scale feature provide?
- A . Configures security group permissions
- B . Seamless and automatic scaling up of instances when more resources are required due to demand
- C . Flexible scaling based on RAM usage
- D . Provisioning on-premise servers
A developer working on Red Hat OpenShift on IBM Cloud is tasked to monitor further application metrics using IBM Cloud Monitoring with Sysdig for the application in container called: my-java-app.
How should the developer configure the Sysdig agent?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D
What is a way for a customer to use their on premise Hardware Security Module (HSM) to secure applications running on IBM Cloud?
- A . They can use Keep Your Own Key (KYOK) with IBM Cloud Key Protect service
- B . They cannot use Keep Your Own Key (KYOK); they need to use an IBM Cloud HSM
- C . They cannot use Keep Your Own Key (KYOK); only Cloud provision keys work
- D . They can use Keep Your Own Key (KYOK) with IBM Cloud Security Advisor