Download Free IBM C1000-118 Real Exam Questions Download
Latest IBM C1000-118 Real Exam Dumps PDF
IBM Cloud Professional Architect v5 exam is designed to test your understanding of cloud computing concepts, including architecture, design principles, security, infrastructure management, and IBM cloud services. C1000-118 exam consists of 60 multiple-choice questions that you have to complete within 90 minutes. The passing score for C1000-118 exam is 64%, and the cost of the exam is $200.
NEW QUESTION # 53
A web application has been deployed in an IBM Virtual Private Cloud. In testing, it's discovered that the web server is not responding to requests over the Internet. What could be the problem?
- A. The VPC is Vyatta Gateway does not have a NAT configuration for the web server group
- B. The VPC load balancer has been configured with the SSH key for the web server
- C. The web server is in a Security Group which is missing a rule that allows inbound traffic on port 80
- D. The subnet ACL has an ALLOW ALL inbound rule set at Priority 1 but a BLOCK ALL inbound rule set at Priority 2
Answer: C
NEW QUESTION # 54
Which Watson Language Translator feature protects your privacy so you can own your data?
- A. Watson object store for data
- B. Data privacy plug-in for Watson
- C. Ability to opt-out of any data collection
- D. Ability to stream data over HTTPS
Answer: C
NEW QUESTION # 55
Which statement best describes the Watson Tone Analyzer service?
- A. The Watson Tone Analyzer service uses linguistic analysis to detect emotional and language tones in written text
- B. The Watson Tone Analyzer service uses acoustic analysis to detect emotional and language tones in audio
- C. The Watson Tone Analyzer service understands the sentiment and emotions in documents
- D. The Watson Tone Analyzer service uses deep learning models to analyze tones across social media platforms
Answer: A
NEW QUESTION # 56
What is meant by the practice of Continuous Integration?
- A. Automating data change replication between data sources at short intervals, for example, every 5 minutes via synchronous or asynchronous methods
- B. Frequently committing code to prevent significant drift and competing changes
- C. Automating the process that moves software through the software development lifecycle
- D. A technique in which application logs are constantly tailed and records are forwarded to a central console
Answer: A
NEW QUESTION # 57
Which of the following is a key features of the IBM Cloud HSM:
- A. Secure erasure using DoD 5220.22-M Data Wipe Method
- B. Provides CA Issued certificates
- C. Generate, process and store keys
- D. Support for HMAC key padding for one-time authentication tokens
Answer: C
NEW QUESTION # 58
What is the maximum File Storage volume size that can be provisioned?
- A. They can be provisioned up to 20 TB
- B. They can be provisioned up to 12 TB
- C. They can be provisioned up to 20 GB
- D. They can be provisioned up to 12 GB
Answer: B
NEW QUESTION # 59
A Dialog Skill in Watson Assistant can make a web service call via which of the following?
- A. Web service definition language
- B. Webhook
- C. SOAP Endpoint
- D. A Dialog Skill in Watson Assistant can make a web service call via which of the following?
Answer: B
NEW QUESTION # 60
When managing file storage in IBM Cloud, what are "Authorized" hosts?
- A. Hosts given volume access to a virtual volume storage
- B. Hosts that are authorized to be used to access file storage virtual machines
- C. Hosts directly connected to a particular volume
- D. Hosts given access to a particular volume
Answer: D
NEW QUESTION # 61
A VPC has been created with a single subnet. Virtual server instances have been deployed on the subnet that have different functions which support a production application. The security team has now said that they want to ensure that network traffic between the different server types can be controlled.
How can this be achieved?
- A. Create security groups for the different server types with inbound and outbound rules that satisfy the security team, into which the VSIs can be placed
- B. Create a VPC load balancer and place each server type into its own back-end pool, then create Layer-7 routing policies that restrict network traffic flowing between the different pools
- C. Create multiple access control lists with rules that satisfy the security team's requirements and associate each VSI to the respective ACL
- D. Use a Hardware Security Module to create advanced network routing tables that ensure traffic does not route between server types, as per the security team's wishes
Answer: D
NEW QUESTION # 62
Which file extension does the LogDNA agent monitor by default?
- A. .log
- B. .logvar
- C. .varlog
- D. .logdna
Answer: A
NEW QUESTION # 63
Which statement describes a key-value database?
- A. Each item in the database is stored as an attribute name (referred to as a key) with its corresponding value
- B. Each item in the database is a document with lists of key-value pairs
- C. Each item in the database is stored in a column named key with values in each row
- D. Each item in the database is encrypted with public-key cryptography
Answer: A
NEW QUESTION # 64
Which of the following is a Cloud native container monitoring and trouble shooting service?
- A. API Gateway
- B. IBM Cloud Monitoring with Sysdig
- C. PortWorx Enterprise
- D. IBM Log Analysis with LogDNA
Answer: B
NEW QUESTION # 65
How is data encrypted in transit when a LogDNA agent sends data to a LogDNA instance?
- A. HTTPS
- B. HTTP
- C. UDP
- D. TCP/IP
Answer: A
NEW QUESTION # 66
Which of the following can be monitored with IBM Cloud Monitoring with Sysdig?
- A. Cloud Functions Applications
- B. Cloud Foundry Applications
- C. Containers within IKS
- D. Windows Virtual Servers
Answer: C
NEW QUESTION # 67
When all objects stored in IBM Cloud Object Storage are encrypted using Server-Side Encryption with Customer Provided Keys (SSE-C), how are read and write object requests sent?
- A. Send the required encryption information as part of SSL requests
- B. Send encryption information as part of UID/PWD verification
- C. Have their requested UID/PWD verified prior to HTTP request flow
- D. Send the required encryption information as headers in the HTTP requests only
Answer: A
NEW QUESTION # 68
Which of the following is a type of DDoS attack that Cloud Internet Services would protect against?
- A. Volumetric Attacks
- B. Layer 5 Attacks
- C. Layer 2 Attacks
- D. Fireware Attacks
Answer: A
NEW QUESTION # 69
In the context of the Key Protect service, which of the following statements is correct?
- A. Key Protect allows you to import keys for other Clouds
- B. Key Protect allows you to manage service accounts
- C. Key Protect allows you to create a new key or import your own key (BYOK)
- D. Key Protect allows you to manage keys as well as SSL/TLS Digital Certificates
Answer: C
NEW QUESTION # 70
When designing infrastructure for critical business applications, transactional databases, or virtual machines that require low-latency, why might you use Block storage instead of File storage?
- A. Block Storage LUNs can be connected to authorized devices through redundant multi-path I/O (MPIO) connections
- B. Block Storage LUNs can connect to authorized devices in another IBM Cloud datacenter
- C. Block Storage LUNs can be used for file-based NFS shares
- D. Block Storage LUNs have data at rest encryption using in-house managed keys
Answer: A
NEW QUESTION # 71
......
PDF (New 2024) Actual IBM C1000-118 Exam Questions: https://examtorrent.actualtests4sure.com/C1000-118-practice-quiz.html
