Skip to content

IBM Certified Solution Architect - Cloud Architect v6

The IBM Cloud Solution Architect certification validates advanced skills in designing, planning, and architecting cloud solutions on IBM Cloud. This certification demonstrates expertise in creating scalable, secure, and resilient architectures using IBM Cloud services and hybrid cloud patterns.

Quick Links

Study Materials

Core Notes

Exam Details

  • Exam Code: C1000-172
  • Duration: 120 minutes
  • Number of Questions: 60 questions
  • Passing Score: 70% (42 out of 60 questions)
  • Question Types: Multiple choice, multiple select, scenario-based
  • Cost: $200 USD
  • Validity: Recertification recommended every 3 years
  • Language: Available in multiple languages
  • Delivery: Pearson VUE (online proctored or test center)

Exam Domains

1. Solution Design and Architecture (30%)

Architecture Principles

  • Design Methodologies
  • Microservices architecture patterns
  • Event-driven architecture (EDA)
  • Twelve-factor app methodology
  • Domain-driven design (DDD)

  • API-first design

  • Architectural Patterns

  • Multi-tier applications (web, app, data)
  • Serverless architectures
  • Container-based applications
  • Hybrid cloud architectures

  • Multicloud strategies

  • Well-Architected Framework

  • Performance efficiency
  • Security and compliance
  • Reliability and resiliency
  • Cost optimization
  • Operational excellence

Application Architecture

  • Compute Selection
  • Virtual Servers for VPC (public, reserved, dedicated)
  • Bare Metal Servers for high performance
  • Code Engine for serverless containers
  • Cloud Functions for event-driven FaaS

  • Kubernetes Service vs OpenShift selection

  • Storage Architecture

  • Object Storage tier selection (Standard, Vault, Cold Vault, Flex)
  • Block Storage performance tiers
  • File Storage for shared access
  • Database selection (relational vs NoSQL)

  • Data lifecycle management

  • Integration Patterns

  • API management and gateways
  • Message queuing (Event Streams, MQ)
  • Event-driven with Event Streams (Kafka)
  • Service mesh for microservices
  • App Connect for integration flows

2. Network Architecture (15%)

VPC Design

  • VPC Components
  • Subnets and IP address planning (CIDR)
  • Zones for high availability
  • Security groups (stateful, instance-level)
  • Network ACLs (stateless, subnet-level)

  • Routing tables and custom routes

  • VPC Connectivity

  • Public gateways for internet access
  • Floating IPs for public-facing services
  • VPN for VPC (site-to-site, client-to-site)
  • VPC peering for cross-VPC communication
  • Transit Gateway for hub-and-spoke

Load Balancing and Traffic Management

  • Load Balancer Types
  • Application Load Balancer (Layer 7)
  • Network Load Balancer (Layer 4)
  • Private vs public load balancers
  • Health checks and failover

  • SSL/TLS termination

  • Global Traffic Management

  • Cloud Internet Services (CIS) global load balancing
  • DNS-based routing
  • Geo-steering and latency-based routing
  • DDoS protection and WAF

Hybrid Connectivity

  • Direct Link
  • Direct Link Dedicated (10 Gbps, 100 Gbps)
  • Direct Link Connect (50 Mbps to 5 Gbps)
  • Redundant connections for HA

  • BGP routing and failover

  • VPN Connectivity

  • Site-to-site VPN for hybrid cloud
  • Client VPN for remote access
  • VPN as backup to Direct Link
  • IPSec and encryption

3. Security and Compliance (15%)

Identity and Access Management

  • IBM Cloud IAM
  • Users, service IDs, access groups
  • Access policies and roles (platform vs service)
  • Trusted profiles for compute resources
  • Context-based restrictions

  • API keys and service credentials

  • Federation and SSO

  • SAML integration with external IdPs
  • App ID for application authentication
  • OAuth 2.0 and OpenID Connect
  • Multi-factor authentication (MFA)

Data Protection

  • Encryption
  • Encryption at rest (AES-256)
  • Encryption in transit (TLS/SSL)
  • Key Protect for key management
  • Hyper Protect Crypto Services (HPCS) for FIPS 140-2 Level 4

  • Bring Your Own Key (BYOK) and Keep Your Own Key (KYOK)

  • Security Services

  • Security and Compliance Center (SCC)
  • Secrets Manager for secrets lifecycle
  • Certificate Manager for SSL/TLS certs
  • Cloud Security Advisor (deprecated, use SCC)
  • Vulnerability Advisor for container images

Compliance and Governance

  • Compliance Frameworks
  • GDPR, HIPAA, PCI-DSS, SOC 2
  • Financial Services Validated services
  • Industry-specific compliance

  • Data residency requirements

  • Governance

  • Resource groups for organization
  • Tagging strategies (user tags, access management tags)
  • Cost tracking and chargeback
  • Audit logging and monitoring

4. High Availability and Disaster Recovery (15%)

High Availability Design

  • Multi-Zone Architecture
  • Deploy across multiple zones
  • Load balancing across zones
  • Stateless application design
  • Database replication across zones

  • Regional services (Object Storage, COS)

  • Availability Zones

  • Understanding zone independence
  • Affinity and anti-affinity rules
  • Zone-specific vs regional resources
  • Zone failure scenarios

Disaster Recovery

  • DR Strategies
  • Backup and restore (highest RTO/RPO)
  • Pilot light (minimal standby resources)
  • Warm standby (scaled-down replica)

  • Active-active (multi-region)

  • Backup Solutions

  • Block Storage snapshots
  • Object Storage cross-region replication
  • Database backup and point-in-time recovery
  • VM image backups

  • Veeam integration for enterprise backup

  • Business Continuity

  • RTO and RPO requirements
  • Failover automation
  • DR testing procedures
  • Cross-region architecture
  • DNS failover with CIS

5. Hybrid and Multicloud Architecture (15%)

Hybrid Cloud with OpenShift

  • Red Hat OpenShift on IBM Cloud
  • OpenShift architecture and components
  • Multi-cluster management
  • Hybrid deployment patterns

  • Application portability

  • OpenShift Features

  • Operators for application lifecycle
  • OpenShift Pipelines (Tekton CI/CD)
  • OpenShift Service Mesh (Istio)
  • OpenShift Virtualization (KubeVirt)
  • Advanced Cluster Management (ACM)

IBM Cloud Satellite

  • Satellite Architecture
  • Deploy IBM Cloud anywhere (on-prem, edge, other clouds)
  • Satellite locations and hosts
  • Satellite-enabled services

  • Hybrid management and control plane

  • Use Cases

  • On-premises cloud extension
  • Edge computing scenarios
  • Data residency requirements
  • Multi-cloud consistency

Cloud Paks

  • Cloud Pak for Applications
  • Modernize applications to containers
  • WebSphere automation

  • Application development tools

  • Cloud Pak for Data

  • Unified data and AI platform
  • Data virtualization and governance

  • Multi-cloud data fabric

  • Other Cloud Paks

  • Cloud Pak for Integration
  • Cloud Pak for Security
  • Cloud Pak for Business Automation

6. Data and Analytics Architecture (10%)

Database Design

  • Relational Databases
  • Db2 on Cloud (managed Db2)
  • Databases for PostgreSQL
  • Databases for MySQL

  • Databases for EnterpriseDB

  • NoSQL Databases

  • Cloudant (CouchDB-based JSON database)
  • Databases for MongoDB
  • Databases for Redis (caching, session store)

  • Databases for Elasticsearch

  • Data Warehouse and Analytics

  • Db2 Warehouse on Cloud
  • Netezza Performance Server (high-performance analytics)
  • Analytics Engine (Spark, Hadoop)

Data Management

  • Data Integration
  • Data Virtualization for unified access
  • DataStage for ETL pipelines
  • Lift CLI for data migration

  • Aspera for high-speed transfer

  • Event Streaming

  • Event Streams (managed Kafka)
  • Real-time data processing
  • Stream-table duality
  • Integration with analytics

Prerequisites & Recommended Experience

Prerequisites

  • IBM Cloud Advocate certification - Recommended foundation
  • Understanding of cloud computing concepts
  • Experience with enterprise architecture
  • Knowledge of networking and security
  • 2-3 years designing cloud solutions
  • Hands-on with IBM Cloud services
  • Experience with hybrid cloud architectures
  • Understanding of containers and Kubernetes
  • Familiarity with DevOps practices

Technical Skills

  • Design multi-tier application architectures
  • Implement VPC networking and security
  • Select appropriate compute, storage, and database services
  • Design for high availability and disaster recovery
  • Architect hybrid cloud solutions with OpenShift
  • Apply security best practices and compliance requirements
  • Optimize performance and cost

Study Strategy

Weeks 1-2: Architecture Fundamentals and Compute - Cloud architecture principles and patterns - IBM Cloud platform deep dive - Compute service selection and design - Container vs serverless architecture - Hands-on: Design multi-tier application

Weeks 3-4: Networking and Security - VPC design and implementation - Load balancing and traffic management - Hybrid connectivity (Direct Link, VPN) - Security architecture and IAM - Hands-on: Build VPC with hybrid connectivity

Weeks 5-6: Storage, Databases, and Data - Storage architecture and tier selection - Database design and selection - Data integration and streaming - Backup and recovery strategies - Hands-on: Design data architecture

Weeks 7-8: High Availability, DR, and Hybrid Cloud - Multi-zone architecture design - Disaster recovery planning - OpenShift and hybrid cloud patterns - Satellite for edge and on-premises - Hands-on: Implement HA solution, deploy OpenShift

Weeks 9-10: Integration, Migration, and Cloud Paks - Application integration patterns - Migration strategies (lift-and-shift, refactor) - Cloud Paks overview and use cases - Multicloud architecture - Hands-on: Design migration plan

Weeks 11-12: Practice and Review - Architecture scenarios and case studies - Practice exams (multiple attempts) - Review weak areas - Final hands-on projects

Essential Hands-on Labs

  • Design and implement multi-zone VPC architecture
  • Deploy highly available application with load balancing
  • Configure Direct Link or VPN for hybrid connectivity
  • Deploy Red Hat OpenShift cluster and application
  • Implement security with IAM, Key Protect, and SCC
  • Design disaster recovery solution with cross-region backup
  • Build event-driven architecture with Event Streams
  • Configure monitoring and logging for applications
  • Design cost-optimized architecture with reserved instances

Study Resources

Official IBM Resources

  1. IBM Training: Official Cloud Solution Architect course
  2. IBM Architecture Center: Study all reference architectures
  3. Practice Tests: IBM official practice exam
  4. Red Hat Documentation: OpenShift architecture guides
  5. Hands-on Labs: Extensive practice with IBM Cloud

Key Documentation

  • IBM Cloud VPC Architecture
  • OpenShift on IBM Cloud Best Practices
  • Security and Compliance Best Practices
  • High Availability Architecture Patterns
  • Hybrid Cloud Reference Architectures

Exam Tips

Question Strategy

  • Long scenario-based questions
  • Identify business vs technical requirements
  • Consider cost, performance, security, and availability
  • Multiple correct approaches - choose BEST option
  • Hybrid cloud and OpenShift questions are common

Common Question Themes

  • VPC network design and security configuration
  • Compute service selection for workload requirements
  • Storage and database selection based on access patterns
  • High availability design with multi-zone architecture
  • Disaster recovery strategies and RTO/RPO
  • Hybrid cloud connectivity (Direct Link vs VPN)
  • OpenShift for container orchestration
  • IAM policy design and access control
  • Cloud Pak selection for specific use cases
  • Cost optimization strategies

IBM Cloud Architecture Best Practices

  • Multi-zone by default: Design for zone redundancy
  • Security in depth: Layers of security controls
  • Hybrid ready: Design for portability with OpenShift
  • API-first: All services accessible via API
  • Event-driven: Decouple with messaging and events
  • Automate everything: IaC with Terraform, Schematics
  • Monitor and observe: Comprehensive logging and monitoring
  • Cost optimize: Right-size resources, use reserved capacity

Time Management

  • 120 minutes for 60 questions = 2 minutes per question
  • Scenario questions may require 3-4 minutes
  • Read all options carefully
  • Flag complex questions for review
  • Leave 15-20 minutes for final review

Success Criteria

  • Design scalable, secure, and resilient IBM Cloud architectures
  • Implement VPC networking with appropriate security controls
  • Select optimal compute, storage, and database services
  • Design high availability solutions across multiple zones
  • Architect hybrid cloud solutions with OpenShift and Satellite
  • Apply security best practices and compliance requirements
  • Plan disaster recovery meeting RTO/RPO requirements
  • Optimize performance and cost for enterprise workloads

Career Impact

Professional Recognition

  • Recognized IBM Cloud architecture expertise
  • Demonstrates advanced cloud solution design skills
  • Valued by enterprises using IBM Cloud
  • Competitive advantage in job market

Career Roles

  • Cloud Solution Architect
  • Enterprise Architect
  • Hybrid Cloud Architect
  • Technical Architect
  • Cloud Consultant
  • Solutions Engineer

Next Steps

  • IBM Cloud for Financial Services - Industry certification
  • Red Hat Certified Architect - Advanced OpenShift
  • Specialty Certifications - Security, Data, AI/ML
  • IBM Cloud Professional Architect - Advanced certification

Design enterprise-grade solutions on IBM Cloud! 🏗️