Question 1

Where does the Kubernetes master API server store secrets?

Asecrets directory

Bmonit directory

Ckubelet directory

Detcd directory

Answer : D

Question 2

To limit and secure integrations with an external service, which method is used to establish a trusted relationship between the Cloud Pak for Business Automation capability on OpenShift with the external service?

AProvide the Cloud Pak for Business Automation operator root CA signer certificate to the external service provider to be configured

BPrompt the Cloud Pak for Business Automation end user to store a local copy of the certificate.

CGenerate a generic secret with the external TLS certificate and then add that secret to the operator trusted_certificate_list CR parameter.

DCopy the external TLS certificate to the /wlp/trustedcert directory on the individual pod that requires access.

Answer : A

Question 3

Which component can have its certificate refreshed after install?

Aetcd

Bdefault token

CIPSec

DHelm

Answer : A

Question 4

Which parameter is required to forward audit logging?

AAUDIT_CONTENT_BY_PROVIDERS

BENABLE_AUDIT_LOGGING_FORWARDING

CAUDIT_ENABLED

DSAS API SERVER AUDIT ENABLED

Answer : B

Question 5

Once a starter deployment of the Cloud Pak for Business Automation is installed, where can access to the different capability services and applications be found?

ABy opening a terminal to the ibm-cp4a-operator pod and open the /opt/ibm/cp4ba-access.txt file.

BBy opening a config map which contains the route URL to access the components and a secret which contains the credentials to use with the different URLs.

CBy opening a config map which contains the route URL to access the components as well as the username and password to use with the URL in clear text.

DBy opening the cpd-access route, which leads to a page that lists the components URLs, usernames and passwords to use.