C1000-172 Free Sample Questions

A multinational corporation is designing a hub-and-spoke network topology on IBM Cloud. They have multiple VPCs in different MZRs (us-south, eu-de) that need to communicate with each other and with their on-premises data centers connected via Direct Link. The primary goals are centralized routing control, simplified network management, and avoiding complex VPC peering meshes. Which IBM Cloud networking service is specifically designed to act as a cloud network hub to connect VPCs and classic infrastructure across regions and with on-premises networks?

A DevOps team is deploying a stateful, data-intensive application on Red Hat OpenShift on IBM Cloud. The application consists of a PostgreSQL database that requires high I/O performance and a processing service that requires a shared file system for temporary data exchange between multiple pods. They need to select appropriate persistent storage solutions that are fully managed and integrated with the platform. Which TWO IBM Cloud storage services should the architect recommend to meet the database and shared file system requirements respectively? (Select TWO)

A leading European bank is architecting a new digital payments platform on IBM Cloud. Due to stringent regulatory requirements like GDPR and PSD2, they have an absolute mandate for "Keep Your Own Key" (KYOK) encryption. The bank's security policy dictates that they must have exclusive control over the entire key management lifecycle, including the hardware security module (HSM) where the master key resides. No cloud provider personnel, under any circumstances, should have access to the HSM or the keys. The solution must provide the highest level of cryptographic security available in the public cloud, validated by FIPS 140-2 Level 4 certification. The architecture involves encrypting data in IBM Cloud Object Storage, Databases for PostgreSQL, and custom applications running in a VPC. The security team needs a centralized, highly secure service to act as the root of trust for all encryption keys used across these services. They are evaluating different key management solutions but are concerned about multi-tenancy risks and potential access by privileged cloud administrators. Which IBM Cloud security service is uniquely designed to meet all the bank's stringent requirements for exclusive key control and the highest level of security certification?

A retail company is modernizing its e-commerce platform. They want to decouple their order processing, inventory management, and shipping notification services. The goal is to build a resilient, scalable system where an "OrderCreated" event can trigger multiple downstream processes asynchronously without the core ordering service having to know about them. The expected event volume is high, with significant peaks during holiday seasons. Which fully managed IBM Cloud service is best suited to serve as the central message bus for this event-driven architecture, providing high-throughput, persistent, and scalable event streaming based on Apache Kafka?

An online media company streams live events to a global audience. They have application instances deployed in IBM Cloud MZRs in Dallas (us-south), Frankfurt (eu-de), and Tokyo (jp-tok). To ensure low latency and high availability, they need to direct users to the geographically closest data center. If the local data center becomes unhealthy, traffic should automatically failover to the next nearest healthy region. What IBM Cloud networking component should be used to achieve this geographic routing and automated global failover?

A manufacturing firm runs its core ERP system on an on-premises IBM Power System running AIX. They want to establish a disaster recovery site in IBM Cloud without refactoring the application. The primary requirement is to have a cloud environment that is binary-compatible with their on-premises AIX LPARs, allowing for rapid recovery using their existing backup and replication tools. Which IBM Cloud compute offering is specifically designed to run enterprise AIX and IBM i workloads, providing a seamless extension of on-premises Power environments to the cloud?

True or False: Deploying an application's components across multiple Availability Zones within a single IBM Cloud Multizone Region (MZR) automatically protects it from a complete regional failure (e.g., a natural disaster incapacitating the entire MZR).

A security administrator needs to analyze all IP traffic flowing in and out of a specific Virtual Server Instance (VSI) network interface within a VPC for security auditing and threat analysis. They require a native IBM Cloud solution to capture this network flow data without installing any agents on the VSI itself. The captured data should be stored in an IBM Cloud Object Storage bucket for long-term retention and analysis. Which IBM Cloud feature should the administrator configure to meet this requirement?

An architect is selecting a storage solution for a new cloud-native application. The primary requirement is to store petabytes of unstructured data, such as images, videos, and backups, in a highly durable and cost-effective manner. The data will be accessed infrequently but must be available with high resiliency. The solution must also support data archiving with automated lifecycle policies to move older data to cheaper storage tiers. Which IBM Cloud Storage service is the most appropriate choice?

A developer is building a serverless application and needs a platform that can run both container images and application code without managing underlying infrastructure. The application has components that are long-running batch jobs and others that are event-driven functions. The developer wants a single, unified experience for deploying and managing all these components. Which IBM Cloud service provides this unified serverless platform?