Contoso is a leading online bank in Europe, with plans to accelerate the
development of new products and services worldwide. “Our technology platform must be a business enabler.
That starts by removing limiting factors,” said the Director of Architecture & Technology.
- 25 backend microservices for the company's mobile apps hosted on standalone Linux virtual machines
- 3 SQL servers hosted on Windows virtual machines
- 1 IBM application gateway
- It took up to 2 weeks to provision a new infrastructure environment as the entire process was manual
and based on demand approvals
1. After a few months of experimentation, the platform team decided to use Kubernetes as its orchestration platform for existing microservices.
2. Shift focus from provisioning and configuring infrastructure environments to building services.
3. The company required complementary technologies to handle non-functional requirements such as automated deployments,
security, monitoring, and recovery.
4. The choices of technology matched the cloud-native and multi-cloud requirements essential to the transformation
of application delivery.
Contoso must meet the following technical requirements:
1. Packaging of microservices and its related artifacts must be standardized.
2. Application logs and service metrics must be retained based on the agreed retention policy.
3. Administrative effort and costs must be minimized whenever possible.
4. The principle of least privilege must be used.
Answer the following question based on the information presented in the case study.
Which of the below tools must be implemented for the planned change #2?
A. ARM Templates
B. Helm
C. Terraform
D. A or C
E. Both B and C
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #1.
What should you do?
A. Build CI/CD pipelines using YAML
B. Use Helm
C. Use Docker Compose
D. None of the above
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #2.
What should you do?
A. Implement Prometheus/Grafana
B. Implement the ELK stack
C. Both A and B
D. Only B
Answer the following question based on the information presented in the case study.
What can be done to implement Technical requirement #3 in context of SQL VMs?
A. Consolidate the three SQL servers into one
B. Migrate the SQL databases from VMs into managed SQL PaaS
C. Migrate to Oracle Databases
D. None of the above
Answer the following question based on the information presented in the case study.
As the number of microservices grew from 25 to 85 in the last one year, Contoso faced challenges like
service routing, end-end service observability ans security.
What should you do?
A. Implement the elastic stack for observability
B. Use Kubernetes service discovery
C. Implement a service-mesh like Istio
D. None of the above
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #4 in the kubernetes cluster.
What should you do?
A. Use resource requests and limits
B. Use K8s namespaces with IAM rules
C. Limit access to kubernetes control plane from management VMs
D. Both B and C
Insurance company, Contoso was hindered by its traditional monolithic architecture, which could not meet the rapid growth
of business needs in the digital era. Its legacy core systems were a barrier to digital innovation, a barrier to launching
new products across new channels, and a barrier delivering a better user experience.
In the digital era, Contoso faces the three ‘Vs’:
1. Big transaction VOLUME
2. VELOCITY to market
3. VARIANCE of different insurance products and channels
1. To drive digital transformation, Contoso planned to migrate core processes from its traditional monolith to a microservice-based architecture leveraging multiple cloud native projects, with Kubernetes as the backbone across multiple clouds.
2. Ensure consistent developer experience across multiple cloud platforms
1. All container images must comply with the Contoso's custom security policy benchmark
2. Shift security left in the development process
3. Zero downtime deployments
4. Reduce deployment frequency from monthly to daily
Answer the following question based on the information presented in the case study.
Which Kubernetes feature must is used to address challenge #1?
A. Cluster auto-scaling
B. Replica sets
C. Horizontal pod-autoscaling
D. Both A and C
Answer the following question based on the information presented in the case study.
Which of the below tools must be implemented for the planned change #2?
A. K8s Deployments
B. Use GitOps to build an automated CI/CD framework
C. Static Code analysis
D. Both B and C
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #1.
What should you do?
A. Avoid container images with root access
B. Private endpoints for container registries
C. Perodic image scans using Qualys
D. Both B and C
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #2.
What should you do?
A. Use an external KMS to store application secrets
B. Secure Code analysis during CI
C. Zero Trust Networks
D. Both A and B
E. Both B and C
Answer the following question based on the information presented in the case study.
You need to implement the technical requirement #3.
What should you do?
A. Use CI/CD pipelines for build and deploy stages
B. Use a rolling update strategy for deployments
C. Use readiness and liveness probes
D. Both A and B
E. Both B and C