C1000-172 Exam Questions & Answers

File Storage (Classic) on IBM Cloud allows users to adjust the performance as needed by choosing different tiers or adjusting the input/output operations per second (IOPS). This flexibility makes it suitable for workloads with varying performance requirements, such as databases, analytics, or content management systems, where the storage performance can be adjusted to match the workload demand.

Performance Adjustability: Users can choose between various performance levels or make adjustments to IOPS, allowing them to balance cost and performance based on current needs.

Why File Storage (Classic)? This flexibility makes File Storage (Classic) suitable for dynamic workloads that require changes in performance over time, such as during peak usage periods.

Comparison with Other Options:

Protects against data in transit failures (B) is not a primary feature of File Storage.

Scalable during provisioning (C) is partially correct, but 'adjusting performance' is more precise.

Asynchronous reads and writes (D) are general file system features, not unique to IBM Cloud File Storage.

IBM Cloud File Storage Documentation

IBM Cloud Architect Exam Study Guide

The main advantage of using IBM Code Engine over traditional server provisioning is greater scalability.

IBM Code Engine: It is a fully managed, serverless platform that automatically scales up or down based on the workload demand. Unlike traditional server provisioning, which requires manual configuration and scaling of resources, IBM Code Engine dynamically adjusts the compute capacity, allowing applications to handle variable loads efficiently.

Scalability Advantage: IBM Code Engine's serverless architecture eliminates the need for pre-provisioning servers, thus avoiding over-provisioning or under-provisioning issues. It can automatically scale from zero to thousands of instances based on demand, making it highly efficient for scaling applications.

Reference from IBM Cloud Professional Architect Materials:

According to IBM documentation on IBM Code Engine, it provides a serverless experience with automatic scaling, where the platform handles all the provisioning, scaling, and management of resources.

The other options are incorrect:

A . Lower latency may be a benefit, but it's not the main advantage.

B . Better load balancing is part of scalability but not the primary advantage over traditional provisioning.

C . Higher security could be a benefit but isn't specific to IBM Code Engine's main advantage over server provisioning.

When deploying an application to an IBM Cloud OpenShift cluster that requires persistent storage across zones within a region, Portworx and Block Storage are viable options.

Portworx: This is a cloud-native storage solution designed for containerized environments like Kubernetes and OpenShift. Portworx provides highly available, scalable, and persistent storage that spans multiple zones within a region, ensuring data redundancy and availability.

Block Storage: IBM Cloud Block Storage provides persistent, high-performance storage that can be attached to virtual servers or containers. It is designed to offer cross-zone availability when configured with the necessary replication and redundancy settings.

Comparison with Other Options:

A (Kubernetes local volume storage): Not suitable for spanning multiple zones as it is tied to specific nodes.

B (Object Storage): Designed for storing large amounts of unstructured data; it is not typically used for persistent storage in Kubernetes.

D (NetApp on Tap): Primarily used for network-attached storage and might not be optimized for persistent storage across multiple zones in OpenShift.

IBM Cloud Block Storage Documentation

Portworx on IBM Cloud

IBM Cloud Architect Exam Study Guide

Client-managed encryption allows clients to have full control over the encryption keys used to protect their block storage volumes, file shares, and custom images on IBM Cloud. This option ensures that only the client has access to the keys and, therefore, to the data.

Benefits of Client-Managed Encryption: Clients retain control over key management, including generation, rotation, and deletion, ensuring compliance with security policies and regulatory requirements.

Comparison with Other Options:

A (Provider-managed encryption): Managed by IBM, not by the client.

C (IBM-managed encryption): Similar to provider-managed, where IBM controls the keys.

D (Custom encryption): Not a specific term used in IBM Cloud documentation for this feature.

IBM Cloud Data Encryption Documentation

IBM Cloud Architect Exam Study Guide

IBM Cloud Hyper Protect Crypto Services is built on FIPS 140-2 Level 3-certified hardware.

FIPS 140-2 Level 3 Certification: This level of certification ensures that the hardware used by IBM Cloud Hyper Protect Crypto Services provides a high degree of security, including physical tamper-resistance and the use of strong encryption protocols.

IBM Hyper Protect Crypto Services: These services leverage Hardware Security Modules (HSMs) that meet the FIPS 140-2 Level 3 certification. The HSMs provide a secure environment for key management and cryptographic operations, which is critical for meeting stringent regulatory and compliance requirements.

Reference from IBM Cloud Professional Architect Materials:

Detailed information on IBM Cloud Hyper Protect Crypto Services and its use of FIPS 140-2 Level 3-certified hardware can be found in IBM documentation on IBM Cloud Hyper Protect Crypto Services.

Other options are incorrect:

B . NIST 140-2 Level 5-certified hardware and D. NIST 140-2 Level 2-certified hardware are not valid terms.

C . FIPS 140-2 Level 4-certified hardware would be a higher certification level than is currently used.