C1000-172 IBM Cloud Professional Architect V6 Practice Questions

The command ibmcloud is vpn-gateway-update --routing-protocol _____ is used to configure dynamic routing for a VPN gateway in a VPC. To enable BGP for exchanging routes with an on-premises network, what value should be used in the blank?

A company has an existing VMware vSphere environment on-premises and wants to extend its data center to IBM Cloud. Their primary goals are to maintain operational consistency using familiar VMware tools (like vCenter and NSX) and to facilitate seamless workload migration between on-premises and the cloud. The cloud solution must provide dedicated, bare-metal infrastructure for performance and isolation. Which IBM Cloud offering is specifically tailored for this scenario?

An architect is comparing IBM Key Protect and IBM Hyper Protect Crypto Services for a new cloud application. The application requires FIPS 140-2 Level 2 certified, multi-tenant key management for standard data encryption needs and supports a Bring Your Own Key (BYOK) model. Exclusive control of the HSM hardware is not a requirement. Which service is the more appropriate and cost-effective choice?

An architect needs to provision an IBM Cloud VPC, several subnets, and a set of Virtual Server Instances using an Infrastructure as Code approach. Which IBM Cloud service provides a managed environment for executing Terraform and Ansible automation?

A logging administrator needs to configure log collection for all services within an IBM Cloud account. The requirements are to have a centralized location to search and analyze logs, archive logs to Cloud Object Storage for long-term compliance, and stream logs to an external SIEM system. Which service provides all these capabilities?

A multinational corporation is designing a hub-and-spoke network topology on IBM Cloud. They have multiple VPCs in different MZRs (us-south, eu-de) that need to communicate with each other and with their on-premises data centers connected via Direct Link. The primary goals are centralized routing control, simplified network management, and avoiding complex VPC peering meshes. Which IBM Cloud networking service is specifically designed to act as a cloud network hub to connect VPCs and classic infrastructure across regions and with on-premises networks?

A DevOps team is deploying a stateful, data-intensive application on Red Hat OpenShift on IBM Cloud. The application consists of a PostgreSQL database that requires high I/O performance and a processing service that requires a shared file system for temporary data exchange between multiple pods. They need to select appropriate persistent storage solutions that are fully managed and integrated with the platform. Which TWO IBM Cloud storage services should the architect recommend to meet the database and shared file system requirements respectively? (Select TWO)

A leading European bank is architecting a new digital payments platform on IBM Cloud. Due to stringent regulatory requirements like GDPR and PSD2, they have an absolute mandate for "Keep Your Own Key" (KYOK) encryption. The bank's security policy dictates that they must have exclusive control over the entire key management lifecycle, including the hardware security module (HSM) where the master key resides. No cloud provider personnel, under any circumstances, should have access to the HSM or the keys. The solution must provide the highest level of cryptographic security available in the public cloud, validated by FIPS 140-2 Level 4 certification.

The architecture involves encrypting data in IBM Cloud Object Storage, Databases for PostgreSQL, and custom applications running in a VPC. The security team needs a centralized, highly secure service to act as the root of trust for all encryption keys used across these services. They are evaluating different key management solutions but are concerned about multi-tenancy risks and potential access by privileged cloud administrators.

Which IBM Cloud security service is uniquely designed to meet all the bank's stringent requirements for exclusive key control and the highest level of security certification?

A retail company is modernizing its e-commerce platform. They want to decouple their order processing, inventory management, and shipping notification services. The goal is to build a resilient, scalable system where an "OrderCreated" event can trigger multiple downstream processes asynchronously without the core ordering service having to know about them. The expected event volume is high, with significant peaks during holiday seasons. Which fully managed IBM Cloud service is best suited to serve as the central message bus for this event-driven architecture, providing high-throughput, persistent, and scalable event streaming based on Apache Kafka?

An online media company streams live events to a global audience. They have application instances deployed in IBM Cloud MZRs in Dallas (us-south), Frankfurt (eu-de), and Tokyo (jp-tok). To ensure low latency and high availability, they need to direct users to the geographically closest data center. If the local data center becomes unhealthy, traffic should automatically failover to the next nearest healthy region. What IBM Cloud networking component should be used to achieve this geographic routing and automated global failover?