IBM Cloud Advocate Certification - Fact Sheet¶

Quick Reference¶

Certification: IBM Certified Advocate - Cloud v2
Exam Code: C1000-170
Duration: 90 minutes
Questions: 60 multiple choice
Passing Score: 70%
Cost: $200 USD
Language: English
Delivery: Pearson VUE (online or test center)
Prerequisites: None (recommended 6-12 months IBM Cloud experience)
Recertification: Every 3 years
Target Audience: Cloud advocates, technical marketers, pre-sales engineers, solution consultants

Official Resources¶

Exam Domains¶

1. Cloud Computing Concepts (15%)¶

Cloud service models (IaaS, PaaS, SaaS)
Cloud deployment models (public, private, hybrid, multi-cloud)
Cloud benefits and business value
Cloud native principles and architectures
Microservices and containerization concepts
DevOps and CI/CD fundamentals

Domain Resources: - 📖 Cloud Computing Fundamentals - 📖 IaaS vs PaaS vs SaaS - 📖 Hybrid Cloud - 📖 Multi-Cloud Strategy - 📖 Cloud Native Architecture - 📖 Microservices Architecture - 📖 Container Concepts - 📖 DevOps Fundamentals

2. IBM Cloud Platform and Services (30%)¶

IBM Cloud account management and IAM
IBM Cloud catalog and service organization
Resource groups and management
Compute services (Virtual Servers, Kubernetes, OpenShift, Code Engine)
Storage services (Block, File, Object Storage)
Networking services (VPC, Load Balancers, DNS)
Database services (Db2, PostgreSQL, MongoDB, Cloudant)
AI/ML services (Watson AI, Machine Learning)
Integration services (Event Streams, MQ, API Connect)

Platform Resources: - 📖 IBM Cloud Console - 📖 IBM Cloud Catalog - 📖 Account Management - 📖 IAM Overview - 📖 Resource Groups - 📖 Virtual Servers - 📖 Kubernetes Service - 📖 OpenShift on IBM Cloud - 📖 Code Engine - 📖 Block Storage - 📖 File Storage - 📖 Object Storage - 📖 VPC Infrastructure - 📖 Load Balancers - 📖 DNS Services - 📖 Db2 on Cloud - 📖 Databases for PostgreSQL - 📖 Databases for MongoDB - 📖 Cloudant - 📖 Watson AI - 📖 Watson Studio - 📖 Machine Learning - 📖 Event Streams - 📖 MQ on Cloud - 📖 API Connect

3. Security and Compliance (20%)¶

IBM Cloud security architecture
Identity and Access Management (IAM)
Data encryption (in transit and at rest)
Security groups and network ACLs
Certificate management
Key Protect and Hyper Protect services
Compliance and regulatory requirements
Security best practices

Security Resources: - 📖 Security and Compliance Center - 📖 IAM Concepts - 📖 IAM Access Policies - 📖 Data Encryption - 📖 Security Groups - 📖 Network ACLs - 📖 Certificate Manager - 📖 Key Protect - 📖 Hyper Protect Crypto Services - 📖 Secrets Manager - 📖 Compliance Programs - 📖 Security Best Practices

4. High Availability and Disaster Recovery (15%)¶

Multi-zone regions (MZRs)
Availability zones and fault isolation
Backup and restore strategies
Business continuity planning
Recovery time objectives (RTO) and recovery point objectives (RPO)
Load balancing and auto-scaling
Monitoring and alerting

HA/DR Resources: - 📖 High Availability - 📖 Disaster Recovery - 📖 Regions and Data Centers - 📖 Multi-Zone Regions - 📖 Backup Services - 📖 Auto Scale - 📖 Monitoring - 📖 Log Analysis - 📖 Activity Tracker

5. Cost Management and Optimization (10%)¶

IBM Cloud pricing models
Usage and billing management
Cost estimation and budgeting
Resource tagging and tracking
Cost optimization strategies
Spending notifications and alerts

Cost Management Resources: - 📖 Billing and Usage - 📖 Pricing - 📖 Cost Estimator - 📖 Managing Costs - 📖 Resource Tagging - 📖 Spending Notifications - 📖 Usage Reports

6. Migration and Modernization (10%)¶

Cloud migration strategies (rehost, replatform, refactor)
Application modernization approaches
Data migration techniques
Migration tools and services
VMware solutions on IBM Cloud
Cloud transformation best practices

Migration Resources: - 📖 Cloud Migration - 📖 Migration Strategies - 📖 Application Modernization - 📖 VMware Solutions - 📖 Mass Data Migration - 📖 Cloud Transformation

Core IBM Cloud Services¶

Compute Services¶

📖 Virtual Private Cloud (VPC)
📖 IBM Cloud Kubernetes Service (IKS)
📖 Red Hat OpenShift on IBM Cloud
📖 IBM Cloud Code Engine
📖 IBM Cloud Functions
📖 Bare Metal Servers

Storage Services¶

Database Services¶

AI and Data Services¶

📖 Watson Assistant
📖 Watson Discovery
📖 Watson Natural Language Understanding
📖 Watson Speech to Text
📖 Watson Text to Speech
📖 Watson Language Translator

Integration Services¶

Developer Tools¶

Common Scenarios and Use Cases¶

Scenario 1: Building a Scalable Web Application¶

Challenge: Deploy a highly available web application with auto-scaling capabilities.

Solution Components: - VPC with multi-zone deployment - Kubernetes Service or Code Engine for container orchestration - Load Balancer for traffic distribution - Object Storage for static content - Databases for PostgreSQL for application data - Monitoring and Log Analysis for observability

Resources: - 📖 Web App Reference Architecture - 📖 Kubernetes Best Practices

Scenario 2: Implementing CI/CD Pipeline¶

Challenge: Automate application build, test, and deployment processes.

Solution Components: - Continuous Delivery service - Toolchains with Git integration - Kubernetes or OpenShift for deployment - Container Registry for image storage - Activity Tracker for audit logs

Resources: - 📖 CI/CD on IBM Cloud - 📖 DevOps Reference Architecture

Scenario 3: Migrating On-Premises Workloads¶

Challenge: Move legacy applications from on-premises data center to IBM Cloud.

Solution Components: - VMware Solutions for lift-and-shift migrations - VPC for infrastructure setup - Direct Link for secure connectivity - Mass Data Migration for large datasets - Cloud Internet Services for DNS and CDN

Resources: - 📖 Migration Tools - 📖 Hybrid Cloud Architecture

Scenario 4: Building AI-Powered Applications¶

Challenge: Integrate AI capabilities into business applications.

Solution Components: - Watson Assistant for conversational interfaces - Watson Discovery for document understanding - Watson Natural Language Understanding for text analysis - Machine Learning for custom models - Object Storage for training data

Resources: - 📖 AI Solutions - 📖 Watson AI Reference Architecture

Scenario 5: Securing Cloud Resources¶

Challenge: Implement comprehensive security controls for cloud workloads.

Solution Components: - IAM for access control - Key Protect for encryption key management - Security and Compliance Center for posture management - Certificate Manager for SSL/TLS certificates - Security Groups and Network ACLs for network security

Resources: - 📖 Security Architecture - 📖 Zero Trust Architecture

Exam Tips and Strategies¶

General Preparation¶

Hands-On Experience: Create a free IBM Cloud account and practice with services
Documentation Review: Focus on service overviews and getting started guides
Architecture Understanding: Study reference architectures and best practices
Use Case Familiarity: Understand when to use which service
Time Management: Allocate 1.5 minutes per question during the exam

Key Study Areas¶

Service selection criteria and trade-offs
IAM roles, policies, and access management
VPC networking components and configuration
Container platforms (Kubernetes vs OpenShift vs Code Engine)
Database selection for different use cases
Cost optimization techniques
High availability and disaster recovery patterns
Security best practices and compliance
Migration strategies and modernization approaches

Common Pitfalls to Avoid¶

Confusing IAM concepts (users, service IDs, access groups, policies)
Mixing up VPC networking components (subnets, security groups, ACLs)
Not understanding service pricing models
Overlooking multi-zone architecture requirements
Missing encryption and compliance requirements
Underestimating monitoring and observability needs

Exam Day Tips¶

Read questions carefully - note keywords like "most," "best," "least"
Eliminate obviously wrong answers first
Watch for scenario-based questions requiring multiple service selections
Flag uncertain questions for review
Use process of elimination for difficult questions
Don't spend too much time on single questions
Review flagged questions if time permits

Additional Learning Resources¶

Practice and Assessment¶

Important Exam Topics by Priority¶

High Priority (Study First)¶

IBM Cloud account structure and IAM
VPC networking fundamentals
Kubernetes and container services
Object Storage capabilities
Database service offerings
Security best practices
High availability architecture
Cost management fundamentals

Medium Priority (Study Second)¶

Watson AI services overview
Integration services (Event Streams, API Connect)
Migration strategies
Monitoring and observability
DevOps and CI/CD concepts
Compliance requirements
Code Engine and serverless computing
Hybrid cloud patterns

Lower Priority (If Time Permits)¶

Specific Watson service features
Advanced networking scenarios
VMware solutions details
Specific compliance standards
Advanced cost optimization techniques
Legacy Classic infrastructure

Quick Reference Cheat Sheet¶

Service Categories Quick List¶

Compute: VPC, IKS, OpenShift, Code Engine, Functions, Bare Metal
Storage: Object Storage, Block Storage, File Storage, Backup
Database: Db2, Cloudant, PostgreSQL, MySQL, Redis, MongoDB, Elasticsearch
Networking: VPC, Load Balancers, Direct Link, Transit Gateway, DNS
Security: IAM, Key Protect, Secrets Manager, Certificate Manager, Security Groups
AI/ML: Watson services, Machine Learning, Watson Studio
Integration: Event Streams, App Connect, API Connect, MQ
DevOps: Continuous Delivery, Toolchains, Container Registry
Observability: Monitoring, Log Analysis, Activity Tracker

IAM Quick Reference¶

Users: Human identities for IBM Cloud access
Service IDs: Non-human identities for applications and services
Access Groups: Collections of users and service IDs
Policies: Grant access to resources
Roles: Platform roles (Viewer, Operator, Editor, Administrator) and Service roles (Reader, Writer, Manager)
Resource Groups: Containers for organizing resources
Account Management: Billing, usage, and organizational settings

VPC Networking Quick Reference¶

VPC: Isolated virtual network
Subnets: IP address ranges within VPC
Security Groups: Stateful firewall at instance level
Network ACLs: Stateless firewall at subnet level
Public Gateway: Enables outbound internet access
Floating IPs: Static public IP addresses
Load Balancers: Application Load Balancer (ALB) and Network Load Balancer (NLB)
Virtual Private Endpoints: Private connectivity to IBM Cloud services

Container Services Quick Comparison¶

Feature	IKS	OpenShift	Code Engine
Type	Managed Kubernetes	Enterprise Kubernetes	Serverless Container
Control	Full K8s control	Full + OpenShift features	Simplified abstraction
Cost	Pay for worker nodes	Higher cost	Pay per use
Best For	Custom K8s workloads	Enterprise apps	Event-driven apps

Database Selection Guide¶

Db2: Enterprise relational database, ACID compliance
PostgreSQL: Open-source relational, extensions support
MySQL: Open-source relational, web applications
Cloudant: NoSQL JSON database, mobile and web
MongoDB: Document database, flexible schemas
Redis: In-memory cache, fast data access
Elasticsearch: Search and analytics engine

High Availability Considerations¶

Deploy across multiple availability zones (MZRs)
Use load balancers for traffic distribution
Implement auto-scaling for compute resources
Configure health checks and monitoring
Set up backup and restore procedures
Define RTO and RPO requirements
Test disaster recovery procedures

Security Best Practices¶

Use IAM policies with least privilege principle
Enable encryption at rest and in transit
Rotate credentials and keys regularly
Implement network segmentation with security groups
Use VPN or Direct Link for hybrid connectivity
Enable audit logging with Activity Tracker
Implement compliance controls with Security and Compliance Center
Use secrets management (Secrets Manager or Key Protect)

Cost Optimization Tips¶

Right-size compute resources
Use reserved capacity for predictable workloads
Implement auto-scaling to match demand
Delete unused resources and snapshots
Use resource tagging for cost tracking
Set spending notifications and budgets
Choose appropriate storage tiers
Leverage free tier services for development

Final Preparation Checklist¶

Additional Resources and Community¶

Good luck with your IBM Cloud Advocate certification exam!

Remember: The key to success is hands-on practice combined with thorough documentation review. Focus on understanding concepts and real-world applications rather than just memorization.