IBM Assessment: Cloud Computing Infrastructure Architect v1 Practice Exam 2025: Latest Questions

An organization is designing a highly available web application on a cloud platform. Which design approach best improves availability during a single-zone failure?

A development team needs an asynchronous mechanism to decouple a front-end service from a back-end order processor and absorb traffic spikes without losing requests. Which cloud platform capability is the best fit?

A cloud architect is implementing access control for administrative operations. Which practice best aligns with security best practices for reducing risk?

A company is migrating a non-critical internal application to the cloud. They want minimal code changes and to keep their current operating system and runtime. Which migration approach is most appropriate?

A customer database must be encrypted such that only the application service account can decrypt data, and encryption keys must be centrally managed with auditing. What is the best solution?

A team is designing a multi-tier application. They want to prevent direct internet access to the database while still allowing the application tier to connect. What is the recommended network design?

An application running in containers experiences intermittent timeouts when connecting to an external API. The platform metrics show frequent container restarts due to failing health checks, even though CPU usage is normal. What is the MOST likely root cause?

After migrating a workload to the cloud, monthly costs increase unexpectedly. Monitoring shows many underutilized compute instances running 24/7, while demand peaks only during business hours. What should the architect recommend FIRST to optimize cost without redesigning the application?

A regulated enterprise requires that production workloads run in an isolated environment with strong governance. They must separate duties between network, security, and application teams and centrally enforce policies across multiple cloud accounts/projects. Which approach best meets these requirements?

A mission-critical application uses a relational database and must achieve low RPO and low RTO across regions. The solution must tolerate a full regional outage with minimal data loss and rapid failover. Which design is MOST appropriate?

A retail company is designing a cloud network for a multi-tier application. The web tier must be reachable from the internet, but the application and database tiers must not be directly accessible. Which design best follows least-privilege network access?

An enterprise needs to enforce that all cloud object storage data is encrypted at rest and access is allowed only from specific application identities. Which control combination best meets this requirement?

A development team wants a managed platform capability that automatically scales stateless microservices based on demand and reduces operational overhead for patching worker nodes. Which approach best fits?

A financial services firm must demonstrate that administrative access to cloud resources is centrally controlled, auditable, and revocable when employees change roles. Which design best supports these goals?

After migrating a web application, users report intermittent timeouts during peak traffic. Metrics show the database CPU is low, but the application instances show high connection counts and increasing response times. What is the most likely root cause?

An architect needs to design for high availability across two availability zones. The application tier is stateless; the data tier is a managed database service that supports multi-zone replication and automatic failover. Which approach best achieves zone resilience?

A company is implementing a zero-trust approach for service-to-service communication within a cloud environment. Which measure is most aligned with zero-trust principles?

A team wants to reduce operational burden for background jobs that run in response to messages placed on a queue. The jobs are short-lived and can scale to zero when idle. Which cloud platform design is most appropriate?

A healthcare organization must meet strict compliance requirements for sensitive data. They need cryptographic key control, rotation, and the ability to demonstrate separation of duties between key administrators and data administrators. Which approach best satisfies these needs?

A legacy application is being migrated. It stores user-uploaded files on local disk and assumes a single instance. The target architecture must be horizontally scalable and tolerate instance replacement without data loss. What is the best redesign approach?

A retail company runs a 3-tier application in a cloud VPC. Security requires that the database tier must not be reachable from the public internet and should accept connections only from the application tier on a single port. Which design best meets this requirement?

A company needs to provide private access from workloads in a VPC to managed cloud platform services (for example, object storage and managed databases) without sending traffic over the public internet. Which approach is most appropriate?

An architect is designing a highly available application across multiple availability zones. The application requires that user sessions remain consistent, and nodes can be replaced at any time without user impact. Which approach best supports this requirement?

After migrating an on-premises application to cloud virtual servers, users report intermittent timeouts only during peak traffic. Metrics show CPU is moderate, but new connections queue up and response times spike. Which action is the best next step to improve resilience and performance?

A regulated enterprise is implementing a cloud landing zone. Requirements include: centralized audit logging, separation of duties between network and application teams, and the ability to prove that infrastructure changes follow an approved process. Which combination best addresses these needs?