STUDY JAM 5

Under IAM, which two roles can be assigned to a user in IBM Cloud for a specific resource or resource group? (Choose two.)

• Viewer

• Developer

• Administrator

• Root

Name two types of network access controls that make up the layers of VPC security.

• IAM Groups, Access Control Lists

• Security Groups, User Control Lists

• Access Control Lists, User Control Lists

• Security Groups, Access Control Lists

Answer explanation

Security Groups and Access Control Lists are two types of network access controls that make up the layers of VPC security.

How would a client secure and control the traffic that passes through a VSI as soon as it is provisioned in the VPC environment?

• Configure security groups before ordering the VSI

• Configure security groups after ordering the VSI

• Order a load balancer with the VSI

• Order a Transit Gateway with the VSI

Answer explanation

Configuring security groups before ordering the VSI allows a client to secure and control the traffic that passes through a VSI as soon as it is provisioned in the VPC environment.

Which IBM Cloud service protects data that runs in containerized workloads in Kubernetes and OpenShift?

• IBM Cloud Juniper vSRX

• Zerto on IBM Cloud

• IBM Cloud Data Shield

• Fortinet FortiGate on IBM Cloud

Answer explanation

IBM Cloud Data Shield protects data that runs in containerized workloads in Kubernetes and OpenShift.

Which platform management role in IBM Cloud Identity and Access Management (IAM) is able to ***assign user access** to the platform?

• Viewer

• Editor

• Operator

• Administrator

Answer explanation

The Administrator platform management role in IBM Cloud Identity and Access Management (IAM) is able to assign user access to the platform.

A _________ is a way of grouping resources together, such as to organize a set of account resources so the access of users can be assigned quickly.

• Resource group

• Service group

• Account group

• User group

What is the relationship between a service and a resource?

• A service can only be placed in a cloud, while a resource can only be on premises.

• A service is the initiation of a resource.

• There is no difference.

• A resource is an instance of a service.

All resources within the same ____________ can communicate via private network across all subnets, assuming there are no ACL or Security Group rules that prevent it.

• VPC

• VPN

• Multicloud

• Hybrid Cloud

Answer explanation

All resources within the same virtual private cloud (VPC) can communicate via private network across all subnets, assuming there are no ACL or Security Group rules that prevent it.

What controls the network traffic that can get to and leave a virtual server instance, behaving like a firewall?

• A security group

• An Access Control List

• A VSI Access Rule

• A Floating IP in combination with an ACL

Answer explanation

A security group controls the network traffic that can get to and leave a virtual server instance, behaving like a firewall.

How many ACLs can be attached to a subnet?

• One

• Two

• Three

• Five