IBM Exam C1000-130 Topic 3 Question 68 Discussion

In IBM Cloud Pak for Integration (CP4I) v2021.2, only a Cluster Administrator has the necessary permissions to replace default keys and certificates. This is because modifying security components such as TLS certificates affects the entire cluster and requires elevated privileges.

Why is 'Cluster Administrator' the Correct Answer?

Access to OpenShift and Cluster-Wide Resources:

The Cluster Administrator role has full administrative control over the OpenShift cluster where CP4I is deployed.

Replacing keys and certificates often involves interacting with OpenShift secrets and security configurations, which require cluster-wide access.

Management of Certificates and Encryption:

In CP4I, certificates are used for securing communication between integration components and external systems.

Updating or replacing certificates requires privileges to modify security configurations, which only a Cluster Administrator has.

Control Over Security Policies:

CP4I security settings, including certificates, are managed at the cluster level.

Cluster Administrators ensure compliance with security policies, including certificate renewal and management.

Why Not the Other Options?

Option

Reason for Exclusion

A . Cluster Manager

This role is typically responsible for monitoring and managing cluster resources but does not have full administrative control over security settings.

B . Super-user

There is no predefined 'Super-user' role in CP4I. If referring to an elevated user, it would still require a Cluster Administrator's permissions to replace certificates.

C . System User

System users often refer to service accounts or application-level users that lack the required cluster-wide security privileges.

Thus, the Cluster Administrator role is the only one with the required access to replace default keys and certificates in Cloud Pak for Integration.

IBM Cloud Pak for Integration (CP4I) v2021.2 Administration Reference:

IBM Cloud Pak for Integration Security Overview

Managing Certificates in Cloud Pak for Integration

OpenShift Cluster Administrator Role

IBM Cloud Pak for Integration - Replacing Default Certificates