IBM Certified Advanced Application Developer – Cloud Platform V1

 
Select 2
 
1.
When setting up a container image for use with IBM Cloud Container Registry, what are two base images that can be customised.

1. VDI disk images
2. VMDK disk images
3. Docker Hub images
4. Cloud Foundry buildpack images
5. IBM Public Repository images

2.
A developer is working on a multi-speed IT project where new functionality is required in system-of-record .what technique allow systems-of-engagement testing of the new functionality before it is implemented in systems-of-re-cord?

1. Systems-of-record service can be virtualizeci to reflect the new feature.
2. A/B testing on the system-of-engagement can be used to validate the new feature
3. Systems-of-engagement can implement temporary code in its application to simulate the needed feature.
4. The systems-of-engagement team can incorporate test driven development as a part of their development process.

3.
What is an advantage of frequent small releases versus infrequent large releases?

1. With each release more is changed
2. Less time is spent testing and verifying each release
3. Aligning with a cadenced release schedule is not required
4. Releases can be combined and inserted into big-bang releases

4.
What are the different lifecycle states of a destination component in Secure Gateway service for IBM Cloud?

1. Active or Dormant
2. Open or Blocked
3. Enabled or Disabled
4. Available or Not Available

5.
What is a property of components created as the result of splitting an application into microservices A . Component functionality based on product capabilities

1. Easy to understand code with centralized data management
2. Ability to independently replace and upgrade each component
3. Duplicate functionality of the original application within each component

 
6.
What needs to be deployed and configured to do a dynamic scan of an on premises web application on a private network using IBM cloud application Security on Cloud?

1. API Gateway
2. AppScan Presence
3. AppScan Enterprise
4. IBM Cloud Service Proxy

7.
Which component of API Connect enables a community of developer to discover and consume API

1. API Catalog
2. API Discovery
3. Developer Portal
4. Datapower Gateway

8.
What does the concept of infrastructure as code refers to?

1. Capturing environment connections via network diagrams
2. Using design to provision application environments
3. Using virtualization as means to get better hardware utilization
4. Capturing the steps and configuration of an environment so they can be executed through automation.

9.
Which step can a developer take to improve the implementation 01 asynchronous service integration in a microservices application architecture ?

1. Enable message payload headers to decrease data latency
2. Disable message queuing to improve application scalability
3. Maximize component coupling to improve application availability.
4. Minimize process communication to increase application responsiveness

10.
The diagram below shows an integration using the IBM Cloud Secure Gateway. What is the purpose of the Secure Gateway Client (SG Client) ?

1. It defines the Secure Gateway’s client API.
2. It creates an API layer to access a database securely.
3. It establishes a data transport link to the Secure Gateway service.
4. It is a secure firewall protecting destination behind the gateway.

11.
The image below illustrates a cloud based microservice notifying an on-premi web services of specific events by invoking  the web services via API Connect.The on-premises web service will then perform any required actions synchronously and return a value to the caller to indicate the success or failure of those actions.
What is an advantage of using a synchronous API call in this scenario?

1. The microservice code will continue to run without errors if the on premise we service is down
2. The network link between the API Connect service and the on premise web service does not have to be up to all the times.
3. The error logic in the microservice code will be simpler than the equivalent code if an asynchronous notification mechanism was used instead
4. End-to-end auditing of a specific event notification message is simpler when compared to using an asynchronous notification mechanism

 
12.
Who performs the installation of updates and fixes to the IBM Cloud runtime and services for a IBM Cloud Private Deployment ?

1. IBM
2. Customer
3. Third party
4. IBM and the customer share the responsibility

13.
Where must a developer specify the use of Secure Gateway when using APt Connect to define a REST API to connect to an enterprise service behind a firewall blocking inbound access from the Internet?

1. In the invoke policy for an API
2. In the enterprise service catalog
3. In the security definition for the API
4. In the plan for APIs that need to be secured

14.
What role must a user have in order to bind or unbind  a service to an application ?

1. Space Manager
2. Space Developer
3. Organization Manager
4. Organization Auditor

15.
Compared to  Monolithic applications, how is application downtime is minimized with microservices architecture ?

1. Highly coupled components enable multiple updates at once.
2. Self contained components enable replacement when processes failed.
3. Maintanence windows are minimized with centralized code governance.
4. Single code base allows for common scheduled downtime with an application.

16.
Which is an example of governance best practice in Microservices development ?

1. Minimize the services used per application.
2. Create separate operations teams per service.
3. Require common code languages per application.
4. Establish a team to own the development lifecycle per service.

17.
Which two IBM cloud services are document oriented databases ?

1. Compose for etcd
2. Compose for Redis
3. Cloudant for NoSQL DB
4. DB2 Warehouse for Cloud
5. Compose for Elastic Search.

18.
A developer is building a hybrid cloud environment that requires deployments across development , Test and production that span on premises and multiple clouds. What single IBM solution can the developer use to satisfy the requirements ?

1. IBM Urbancode Deploy.
2. IBM Cloud Auto-Scaling.
3. IBM Cloud Continuous Delivery.
4. IBM Cloud Monitoring and Analytics.

19.
From an application operations perspective , what benefit does monolithic architecture provide ?

1. Decreased Complexity.
2. Increased Service Distribution.
3. Increased resource granularity.
4. Decreased resource consistency.

20.
A developer is given the requirement to fetch a key/value application configuration data from a fault tolerant redundant data store.Which IBM cloud service would minimize the coding required to meet these requirements ?

1. Compose for etcd
2. Cloudant for NoSQL DB
3. Compose for Rethink DB
4. Big Insight for Apache Hadoop

21.
What is a common security concern with Docket containers?

1. They do not support encryption.
2. The root account is always needed to work with containers.
3. The OS kernel is shared among all containers and the host
4. Security policies cannot be individually applied to containers running on same host.

22.
By Default, log data is stored for how many days in IBM Bluemix Cloud Foundry application

1. 7
2. 28
3. 60
4. 90

23.
A developer needs to deploy an application that combines multiple isolated process running on the same host and also require root access to the host for occasional platform tuning tasks.
Which IBM Cloud compute option is the correct choice?

1. Functions
2. Containers
3. Virtual Servers
4. Cloud Foundry

24.
What kind of architecture concerns connections that span on – premises and cloud environments, regardless if the cloud is local, dedicated or public ?

1. Microservices architecture.
2. Multispeed IT architecture.
3. Hybrid integration architecture.
4. Enterprise Integration architecture.

25.
What is the result of the Command cf cups mylogs -l syslog tls://HOST : PORT

1. Binds logging service to my-logs CF application
2. B. Creates my-logs application that accepts logs from the specific host
3. Sends the logs of my-logs CF application to specific logging endpoint.
4. Creates a user provided service my-logs to send logs to the specific logging endpoint.

26.
What is a business benefit of the IBM Cloud Garage Method ?

1. Cloud deployment model.
2. Significant saving in capital expenditure.
3. Reduced dependency on outsourced development.
4. Ability to deliver innovative ideas to your customer faster.

27.
In this diagram of Cloud based API  Management service provider, What is the purpose of API Management component ?

1. Authorize access to the APIs
2. Cache results returned by APIs
3. Encrypt the data exposed by the APIs
4. Define the data exposed by the APIs

28.
What is the security advantage of using microservices applications, compared to monolithic application for data access ?

1. Fine-grained control for data that has different authorization needs
2. Dynamic encryption control through distributed data partitions for each component
3. Centralized data governance enables easier administration of data security policies
4. Polyglot technologies enable hardware data security modules to be used with components

29.
The user IDs of Cloud service administrators have extended capabilities and need special control. What is the governance capability that helps customers meet compliance requirements and prevent data breaches through account ?

1. Single, Sign -On-Service
2. Security Access Management
3. Federated Identity Management
4. Privileged Identity Management

30
The image below illustrates an on-premises application notifying a cloud based application of specific events by sending asynchronous messages via a message broker. A cloud based message broker client application receives the messages and perform any required action.
What are two advantages of using asynchronous messaging in this scenario?
Select 2

1. Changes to the format of the event notification messages will have no effect on the cloud message broker client application.
2. The network link between the message broker and the cloud based application does not have to be up at all times.
3. End-to-end auditing of a specific event notification message is simpler when compared to using synchronous notification.
4. Confirmation that a message has been received by the message broker ensures that the message broker ensure that the message will eventually be processed successfully by the cloud application.
5. The error logic in the on-premises application code that sends a single event notification will be simpler than the equivalent code if a synchronous notification mechanism was used instead.

31
Security requirements  for a cloud service are similar to those in traditional IT environment. Why may the risks be different ?

1. Senstive data at rest in the cloud cannot he encrypted
2. It is not possible to provision firewalls in a cloud environment
3. Virtual Private Network (VPN) is used to connect to the cloud seivice
4. Technical design and operational control of the cloud service are in the hands of the cloud service provider.

32
Which integration architecture uses a centralized broker and adapters to connect application

1. Web API architecture

B . Hub and spoke architecture

1. Point-to-point architecture
2. Service-oriented architecture

33
What is the IBM Cloud deployment model that allows protection of the most workload behind an enterprise on-premises firewall ?

1. IBM Cloud Hybrid
2. IBM Cloud Private
3. IBM Cloud Dedicated
4. IBM Cloud On-Premises

34
What is the result of isolating mission critical virtual machine (VM) workloads on different hypervisors from less critical VM workloads ?

1. VMs of different trust levels are located on different physical servers.
2. Mission critical workloads cannot be patched independently of less critical VMs
3. Logging for mission critical workloads can be easily consolidated with less critical workloads.
4. Hypervisor performance policies are shared between mission critical and less critical workloads.

35
A developer needs to migrate an on premise application that uses an on premise DB2 database to the cloud. The migrated application would access the same on premise database via a VPN and run on comparable hardware.
Which two factors should concern the developer the most when assessing the negative performance impact of running the application cloud versus on premise?
Select 2

1. The complexity of DB2 User Define Functions invoked by the application
2. The frequency of interactions between the application’s DB2 client and the DB2 server
3. The number of subselects in the SQL passed to the server by the application’s DB2 client
4. The amount of data passed to the server and returned to the application via the DB2 client
5. The number of tables accessed by SQL queries passed to the server by the application’s DB2 client

36
Which tool in API Connect is an alternate  to API Designer User Interface ( UI)  for creating and publishing APIs ?

1. YAML
2. Developer Portal
3. API Connect Command Line Interface (CLI)
4. Eclipse API Integrated Development Environment (IDE)

37
The Image below illustrates an on premise application accessing a cloud based database by connecting directly to it via a secure tunnel.
The application is performing slowly because each user operation requires multiple sequential database queries and the network latency of the secure tunnel is high. Which of the following will result in the most improvement in performance?

1. Use a database query optimizer in the database server.
2. Cache each database query result in the database server.
3. Create an on-premises microservice with a single API call for each user operation to front end all the database queries in that user operation
4. Create a REST API in the same cloud with a single API call for each user operation to front end all the database queries in that user operation

38
How can a developer provide multi-factor authentication for their application using the IBM Single Sign On service?

1. Configure the service with multiple identity providers
2. Configure the service to use an enterprise LDAP identity provider.
3. Configure the service with a social identity provider such as Google or Facebook
4. Configure the service using SAML to an appropriate third-party identity provider.

39
Which statement is true regarding a IBM Cloud Continuous Delivery toolchain template?

1. It does not include testing tools
2. It can only be used by administrators to instantiate a toolchain
3. It captures connectivity and integrations for all tools in the toolchain
4. It must be stored in the same source code repository as the application code

40
Which security principle governs access to components within a microservices architecture ?

1. Least privilege
2. Defense in depth
3. Principal propagation
4. Service authentication

41
What is a blue/green deployment process?

1. A process by which a user can choose which of two application versions to use.
2. A process by which an application is scaled vertically to handle dynamic workloads.
3. A process by which an application is scaled horizontally to handle dynamic workloads.
4. A process by which a new version of an application is deployed to an environment with no disruption to the user.

42
Select 2
What are the two categories of vulnerabilities that are detected by IBM vulnerability Advisor ?

1. Images with a weak passwords.
2. Vulnerable packages in the container.
3. Data container images that are not encrypted
4. Images running database services on non-standard ports
5. Images with sensitive data present in the container images.

43
When using IBM Urban Code Deploy (UCD) to deploy applications to lBM Cloud, an application environment in UCD is mapped by default to what IBM Cloud Foundry entity?

1. Space
2. Region
3. Container
4. Application runtime

44
What level of functionality influences the decision on how microservices organized ?

1. Process level
2. Platform level
3. Coding language level
4. Business capability level

45
What must be done before an application developer can consume an APl managed by IBM APl Connect?

1. Obtain an API license
2. Design and test the application
3. Subscribe the application to a Plan
4. Define the application’s LoopBack model

46
A developer wants to look for administrative commands to a cloud foundry application changing state from started to stopped. What component should they filter on in the logs ?

1. API
2. RTR
3. STG
4. APP