C1000-155 Free Sample Questions

IBM Cloud Security Engineer v1 Practice Test
10/199 questions · Unlock full access
Q1

A financial services application running on Open Liberty needs to consume a RESTful API from a partner. This partner API is known for intermittent latency spikes. To prevent cascading failures, the development team wants to implement a resilience pattern that stops calling the service for a short period after a certain number of consecutive failures. Which MicroProfile Fault Tolerance annotation is the most appropriate for this specific requirement?

Q2

A developer is configuring an Open Liberty server and needs to set a system property that must be available very early in the server startup process, even before the main server configuration (`server.xml`) is parsed. The property value is sensitive and should not be checked into source control. Which file is the standard and most appropriate location to define this property?

Q3

A team is building a set of microservices on Open Liberty and wants to implement true-to-production integration tests. The `inventory-service` depends on a PostgreSQL database and a `warehouse-service` REST API. Which testing framework is specifically designed to manage the lifecycle of these dependencies in Docker containers during the test run, providing a production-like environment?

Q4

A cloud architect is designing a security model for internal microservices communication within a Kubernetes cluster. To achieve a zero-trust posture, the architect wants to ensure that when `Service-A` calls `Service-B`, both services cryptographically verify each other's identity before any data is exchanged. Which security mechanism should be configured in Open Liberty on both services to fulfill this requirement?

Q5Multiple answers

A developer is creating a readiness health check for a microservice that depends on an external database. The goal is to prevent Kubernetes from routing traffic to the pod until the database connection is confirmed to be healthy. Which of the following code snippets correctly implements this `@Readiness` check using the MicroProfile Health API? (Select TWO)

Q6

True or False: The 'zero migration' feature of WebSphere Liberty guarantees that an application developed for Liberty using Jakarta EE 8 APIs will run without any code or configuration changes on a newer Liberty version that supports Jakarta EE 10.

Q7Multiple answers

A developer is using Liberty dev mode (`mvn liberty:dev`) for rapid application development. After making a code change in a JAX-RS resource class, they notice the change is not reflected when they test the endpoint. The console log shows no errors. What are the most likely causes for hot reload to fail in this scenario? (Select TWO)

Q8

A consultant is reviewing a microservice architecture and identifies that several services have hardcoded connection details for databases and external APIs within their `server.xml` files. This practice violates a key principle of the 12-Factor App methodology. Which factor is most directly violated by this approach?

Q9

A developer needs to implement a JAX-RS resource that accepts a user registration payload. The `password` field in the payload must be at least 12 characters long and contain at least one uppercase letter, one lowercase letter, one number, and one special character. Which Jakarta EE technology is the most appropriate and standard way to enforce these validation rules declaratively at the model level?

Q10

An operations team is trying to integrate Open Liberty's logs with a centralized logging platform like Splunk or the ELK Stack. To make parsing efficient and reliable, they need the logs to be in a structured format. What is the simplest way to configure the Liberty `server.xml` to achieve this?