C1000-196 sample questions

Question 1

An administrator is configuring high availability using Standby Control across two DataPower Gateway appliances. According to IBM official guidelines, what recommendation is specified regarding the 'standby-preempt' setting?

Accepted Answer

Preemption should not be enabled because it can cause unnecessary failover flapping during intermittent network or link fluctuations.

Answer

Preemption must always be enabled to guarantee that the primary node immediately regains the virtual IP upon recovery.

Answer

Preemption must be enabled on the backup appliance but disabled on the master appliance to prevent split-brain conditions.

Answer

Preemption is mandatory when secondary virtual IP addresses ('standby-secondary-virtual-ip') are configured.

Question 2

A systems architect is deploying IBM DataPower Gateway for Linux on two Red Hat Enterprise Linux (RHEL) bare-metal servers. The networking team intends to utilize Standby Control to manage a shared virtual IP (VIP) and enable Self-Balancing using the Application Optimization feature.

During testing, the team observes that the standby control daemon fails to initialize properly, and network traffic directed to the VIP experiences packet drops. Further inspection reveals that the host operating system is running local firewalld services, and 'datapower.conf' retains default values.

Which architectural constraint and configuration adjustment must the administrator address to successfully implement Standby Control on DataPower Gateway for Linux?

flowchart TD Host[RHEL Host OS] --> Conf{datapower.conf: EnableStandbyControl=true} Conf -->|Disabled| Fail[Standby Control Inactive] Conf -->|Enabled| Kernel[DataPower Takes Control of iptables & ip_vs] Kernel --> FW{Host Firewall Running?} FW -->|Yes| Conflict[Conflict: Host Firewall Blocks Standby] FW -->|No| Success[Standby Control Functional] Success --> Bal{Self-Balancing Requested?} Bal -->|Yes| Unsupported[Unsupported on Linux Form Factor]

Accepted Answer

Standby control must be explicitly enabled with EnableStandbyControl=true in datapower.conf, the host firewall must be disabled because DataPower manages iptables and ip_vs, and Self-Balancing is unsupported on Linux.

Answer

Standby control on Linux requires assigning the VIP directly to the host's physical NIC, maintaining firewalld rules for port 443, and delegating load distribution to Linux ipvsadm.

Answer

Standby control on Linux requires configuring an external keepalived daemon on RHEL, leaving datapower.conf unmodified, and configuring Self-Balancing in the default domain.

Answer

Standby control runs via standard VRRP over UDP port 112, requires host firewalld rules opening multicast traffic, and supports Self-Balancing only if AO licenses are imported.

Question 3

A security administrator is planning a disaster recovery procedure using the CLI command 'secure-backup "" [include-raid]'. Which cryptographic limitation and platform constraint apply to this command?

Accepted Answer

The backup certificate cannot use ECDSA keys, and the secure-backup command is unavailable on the Docker platform.

Answer

The backup certificate must use Ed25519 keys, and secure backup mode cannot be executed if RAID storage is present.

Answer

The destination URL cannot specify FTP endpoints, and the backup certificate cannot exceed 2048-bit RSA key length.

Answer

The backup certificate must be signed by an external public CA, and the command is supported exclusively on physical appliances.

Question 4

When an administrator executes a complete 'secure-backup' on a physical IBM DataPower Gateway appliance, which critical items are excluded from the encrypted backup package?

Accepted Answer

Hardware Security Module (HSM) private keys and Baseboard Management Controller (BMC) IPMI user passwords.

Answer

Static routing table entries and domain-level checkpoint files stored in temporary:.

Answer

System configuration files in config: and domain-specific access policies.

Answer

Local user credentials defined in RBM settings and custom SSL certificates stored in cert:.

Question 5

An enterprise DataPower administrator is architecting a logging infrastructure across 40 application domains on an IBM DataPower Gateway appliance. When planning the allocation of log target objects, what system capacity ceiling and domain initialization behavior must the administrator account for?

Accepted Answer

The appliance supports a maximum of 1004 log targets globally, and creating a new application domain automatically provisions 2 default log targets.

Answer

The appliance supports a maximum of 512 log targets globally, and new application domains do not include any log targets until manually configured.

Answer

The appliance supports up to 256 log targets per domain with a global cap of 2048, and domain initialization generates a single default log target.

Answer

The appliance supports an unlimited number of log targets subject only to available temporary memory, and each new domain generates 4 default log targets.

Question 6

When configuring event subscriptions on a DataPower log target using the CLI command 'logging event ', which behavior correctly describes how the gateway processes the configured priority threshold?

Accepted Answer

The log target captures all events at or above the designated priority level in the hierarchy (emerg, alert, critic, error, warn, notice, info, debug).

Answer

The log target captures exclusively events that match the exact configured priority level, discarding higher and lower severities.

Answer

The log target processes all categories at the info level by default unless overridden by an explicit syslog facility code.

Answer

The log target captures events at or below the designated priority level, filtering out events with higher severity.

C1000-196 IBM DataPower Gateway v10.x Administrator - Professional Practice Questions

Create an account to continue.

Create an account to continue.

Related exams