Free C1000-147 sample questions

Correct answer: NetworkPolicy objects

NetworkPolicy is a Kubernetes/OpenShift resource that controls the traffic flow at the IP address or port level (OSI layer 3 or 4). A NetworkPolicy object can be defined to create an ingress rule for the `cp4i-mq` namespace that explicitly allows traffic from pods in the `cp4i-ace` namespace to TCP port 1414, while denying all other traffic by default. This is the standard mechanism for implementing network segmentation and zero-trust principles within an OpenShift cluster.

Correct answer: True

This statement is true. The Operations Dashboard integrates with CP4I capabilities like App Connect Enterprise and MQ. It leverages OpenTracing standards and built-in probes to automatically generate and correlate trace data as messages pass between these components. This allows for end-to-end visibility without requiring developers to manually add tracing instrumentation to their integration logic.

Correct answer: High throughput for sequential writes

Kafka is optimized for high-volume, sequential writes as it appends messages to log files. Therefore, the underlying storage system's ability to sustain high sequential write throughput is the most critical performance factor. While read performance is important for consumers, the write performance is paramount for the brokers to handle ingress traffic without becoming a bottleneck.

Correct answer: In a YAML file representing the App Connect Dashboard Custom Resource (CR) within a Git repository.

The core principle of GitOps is that a Git repository is the single source of truth for the desired state of the system. All configuration, including the replica count and logging level for the App Connect Dashboard, should be defined declaratively in a Custom Resource YAML file. This file is committed to the Git repository, and a tool like Argo CD automatically synchronizes the cluster state to match what is defined in Git.

Correct answer: The Identity and Access Management (IAM) service

The Identity and Access Management (IAM) service, a core part of the Cloud Pak foundational services, provides authentication and authorization for the platform. It is designed to connect to various external identity providers, including LDAP servers like Active Directory, allowing for centralized user management and single sign-on (SSO) capabilities across the Cloud Pak.

Correct answer: They are built on Red Hat OpenShift, providing a consistent container platform for hybrid cloud environments.

The foundational element of IBM Cloud Paks is Red Hat OpenShift. Since OpenShift can be deployed on various infrastructures (bare metal, virtualized, private cloud, and major public clouds), it provides a consistent, standardized platform. This allows the containerized software within the Cloud Paks to run identically regardless of the underlying environment, directly addressing concerns about portability and vendor lock-in.

Correct answer: Configuring storage-level asynchronous replication of the MQ Persistent Volumes between the London and Frankfurt data centers.

Storage-level asynchronous replication is a common and effective DR strategy for stateful workloads like MQ. It continuously replicates block-level data changes from the primary site's storage to the DR site's storage. This method can typically achieve an RPO of minutes (meeting the 15-minute requirement) and allows for a relatively quick recovery process (meeting the 4-hour RTO) by attaching the replicated volumes to new MQ pods in the DR cluster after a failover is initiated.

Correct answer: Event-driven architecture using IBM Event Streams to publish admission events to a topic.

This scenario is a classic use case for an event-driven architecture. The 'patient admission' is an event. Publishing this event to an IBM Event Streams (Kafka) topic allows multiple downstream systems (consumers) to subscribe and react to it independently and in near real-time. This 'publish-subscribe' model decouples the systems and easily accommodates future consumers without changing the event producer.

Correct answers: `oc describe pod `; `oc logs -p `

The `oc describe pod` command provides a detailed, human-readable summary of a pod's state, including recent events. It is invaluable for troubleshooting because it will show the reason for restarts (e.g., 'OOMKilled' for out-of-memory errors), status conditions, volume mounts, and assigned node.

The `oc logs` command is used to view the standard output from a container. The `-p` or `--previous` flag is critical here, as it fetches the logs from the previously terminated (restarted) container instance. This allows the team to see any error messages that occurred right before the container crashed.

Correct answer: Azure Files (Premium) with ReadWriteMany (RWX) access mode.

The API Connect developer portal requires a shared file system that can be mounted by multiple pods concurrently. This necessitates a storage solution that supports the ReadWriteMany (RWX) access mode. Azure Files is Microsoft's managed file share service that provides this capability. The Premium tier is recommended for production workloads due to its higher performance and IOPS, which is suitable for a component like the developer portal.