IBM C1000-150 Exam - Topic 8 Question 32 Discussion

Actual exam question for IBM's C1000-150 exam

Question #: 32
Topic #: 8

To limit and secure integrations with an external service, which method is used to establish a trusted relationship between the Cloud Pak for Business Automation capability on OpenShift with the external service?

AProvide the Cloud Pak for Business Automation operator root CA signer certificate to the external service provider to be configured

BPrompt the Cloud Pak for Business Automation end user to store a local copy of the certificate.

CGenerate a generic secret with the external TLS certificate and then add that secret to the operator trusted_certificate_list CR parameter.

DCopy the external TLS certificate to the /wlp/trustedcert directory on the individual pod that requires access.

Show Suggested Answer

Suggested Answer: A

When setting up a demo environment an identity provider may not be known. In this case, htpasswd can be used to replace the default admin user with a simple identity provider. Htpasswd is an Apache utility for creating and updating user authentication files for the Apache web server. It uses a combination of plaintext passwords and a hashing algorithm to store its credentials.

by Emile at May 18, 2024, 10:16 PM

Limited Time Offer

25%

Off

Get Premium C1000-150 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shanda

6 months ago

Wait, can we really just copy the cert like that? Seems sketchy!

upvoted 0 times

...

Leota

6 months ago

D is a bit too manual for my taste.

upvoted 0 times

...

Domonique

6 months ago

C sounds right, but I'm not 100% sure.

upvoted 0 times

...

Maybelle

7 months ago

Definitely not B, that seems risky.

upvoted 0 times

...

Clay

7 months ago

I think it's option A for sure.

upvoted 0 times

...

Almeta

7 months ago

I’m leaning towards D because it mentions copying the certificate directly to the pod, but I’m not confident if that’s the best practice for security.

upvoted 0 times

...

Mattie

7 months ago

I feel like option A sounds familiar, but I also remember something about storing certificates locally. Was that option B?

upvoted 0 times

...

Minna

8 months ago

I remember we discussed the importance of certificates in class, but I can't recall if providing the CA signer certificate is the right approach.

upvoted 0 times

...

Ma

8 months ago

I think the answer might be C, but I'm not entirely sure about the specifics of the trusted_certificate_list.

upvoted 0 times

...

Nichelle

8 months ago

I'm not sure about generating a generic secret with the external TLS certificate. That doesn't seem like the right approach to establishing a trusted relationship. I'll probably go with option A.

upvoted 0 times

...

Merilyn

8 months ago

Okay, I think I've got this. The key is to provide the Cloud Pak's root CA signer certificate to the external service so they can verify the identity of the Cloud Pak. That's option A.

upvoted 0 times

...

Avery

8 months ago

Hmm, I'm a bit confused by the wording here. I'll need to make sure I understand the difference between providing the CA signer certificate and adding the external TLS certificate to the trusted list.

upvoted 0 times

...

Tish

8 months ago

This looks like a tricky one. I'll need to carefully read through the options and think about the best way to establish a trusted relationship between the Cloud Pak and the external service.

upvoted 0 times

...

Royal

8 months ago

This seems pretty straightforward. I think the key is to focus on the email-related configurations like inbound/outbound workflows, email aliases, and users.

upvoted 0 times

...

Sherell

8 months ago

I'm a bit confused by the wording here. Does "RmCm application user account" refer to a specific user account, or is it more general?

upvoted 0 times

...

Elke

8 months ago

I remember practicing questions similar to this, and I have a vague feeling that option C is more about legalities rather than typical representations.

upvoted 0 times

...

Verlene

1 year ago

I'm going with option C. It's the most secure and automated approach to managing the trusted certificates. Plus, it avoids the potential headaches of the other options.

upvoted 0 times

...

Kaycee

1 year ago

Ha! Copying the certificate to a specific pod? That's like trying to secure your house by hiding the key under the doormat. Option C is the way to go.

upvoted 0 times

Antione

12 months ago

Yeah, hiding the key under the doormat is never a good idea. Option C provides a more secure method for integration.

upvoted 0 times

...

Antione

12 months ago

I agree, copying the certificate to a specific pod is not secure at all. Option C is much more reliable.

upvoted 0 times

...

Antione

1 year ago

Option C is definitely the best way to establish a trusted relationship with the external service.

upvoted 0 times

...

Claribel

1 year ago

Option A makes sense, but it would require the external service provider to be involved in the setup process. Option C looks more straightforward and self-contained.

upvoted 0 times

Shaun

12 months ago

A) Option C does seem more convenient and secure for setting up the trusted relationship.

upvoted 0 times

...

Rex

12 months ago

C) Generate a generic secret with the external TLS certificate and then add that secret to the operator trusted_certificate_list CR parameter.

upvoted 0 times

...

Krystina

1 year ago

A) Provide the Cloud Pak for Business Automation operator root CA signer certificate to the external service provider to be configured

upvoted 0 times

...

Isidra

1 year ago

That makes sense too, we need to establish a trusted relationship between the Cloud Pak for Business Automation capability and the external service.

upvoted 0 times

...

Melvin

1 year ago

I'm not sure about option B. Prompting the end user to manage the certificate locally doesn't sound like a scalable solution for enterprise-level deployments.

upvoted 0 times

Jolanda

1 year ago

Option C might be a better choice for establishing a trusted relationship with the external service.

upvoted 0 times

...

Jolanda

1 year ago

I agree, option B doesn't seem like the best approach for scalability.

upvoted 0 times

...

Rhea

1 year ago

Option C seems like the correct way to establish a trusted relationship. It's a more secure approach than just copying the certificate to a specific pod.

upvoted 0 times

Skye

1 year ago

Copying the certificate to a specific pod seems risky.

upvoted 0 times

...

Zona

1 year ago

Storing a local copy of the certificate might not be the best practice.

upvoted 0 times

...

Deeanna

1 year ago

I think providing the root CA signer certificate is also a good option.

upvoted 0 times

...

Erick

1 year ago

I agree, option C is the most secure method.

upvoted 0 times

...

Clement

1 year ago

I disagree, I believe the correct answer is A. We should provide the Cloud Pak for Business Automation operator root CA signer certificate to the external service provider.

upvoted 0 times

...

Isidra

1 year ago

I think the answer is C, because we need to generate a generic secret with the external TLS certificate.

upvoted 0 times

...