IBM Cloud Solution Architect Certification - Fact Sheet¶

Quick Reference¶

Certification: IBM Certified Solution Architect - Cloud v2
Exam Code: C1000-172
Duration: 90 minutes
Questions: 60 multiple choice
Passing Score: 70%
Cost: $200 USD
Language: English
Delivery: Pearson VUE (online or test center)
Prerequisites: None (recommended 3+ years architecture experience)
Recertification: Every 3 years
Target Audience: Cloud architects, solution architects, technical architects, enterprise architects

Official Resources¶

📖 Exam Homepage
📖 IBM Cloud Architecture Center
📖 IBM Cloud Documentation
📖 IBM Cloud Reference Architectures
📖 IBM Cloud Best Practices
📖 IBM Cloud Well-Architected Framework
📖 IBM Cloud Garage Method
📖 IBM Cloud Learning
📖 Pearson VUE Testing
📖 IBM Cloud Certification Hub

Exam Domains¶

1. Architecture Design Principles (25%)¶

Well-Architected Framework principles
Cloud-native architecture patterns
Microservices and service-oriented architecture
Event-driven architecture
Serverless architecture patterns
Multi-tier application architecture
API-first design approach
Domain-driven design principles
Architecture trade-offs and decision making

Domain Resources: - 📖 IBM Cloud Architecture Framework - 📖 Cloud Architecture Principles - 📖 Microservices Architecture - 📖 Event-Driven Architecture - 📖 Serverless Architecture - 📖 API-First Design - 📖 Domain-Driven Design - 📖 Architecture Decision Records

2. Infrastructure Architecture (20%)¶

VPC design and implementation
Network architecture (subnets, routing, VPNs)
Load balancing strategies
Compute service selection (VMs, Kubernetes, serverless)
Storage architecture (Block, File, Object)
Hybrid and multi-cloud connectivity
Edge computing and CDN
Infrastructure as Code (Terraform, Schematics)

Infrastructure Resources: - 📖 VPC Architecture - 📖 Network Architecture - 📖 VPC Documentation - 📖 VPC Design Guide - 📖 Load Balancer Best Practices - 📖 Compute Services - 📖 Storage Solutions - 📖 Hybrid Cloud Architecture - 📖 Direct Link - 📖 Transit Gateway - 📖 VPN Gateway - 📖 Terraform on IBM Cloud - 📖 Schematics

3. Application and Data Architecture (20%)¶

Application architecture patterns
Container orchestration (Kubernetes, OpenShift)
Serverless computing (Code Engine, Functions)
Database selection and design
Data persistence strategies
Caching architectures
Message queuing and event streaming
API gateway and management
Integration patterns

Application Architecture Resources: - 📖 Application Architecture - 📖 Container Architecture - 📖 Kubernetes Service - 📖 OpenShift on IBM Cloud - 📖 Code Engine - 📖 Cloud Functions - 📖 Database Services - 📖 Data Architecture - 📖 Caching Strategies - 📖 Event Streams Architecture - 📖 API Management - 📖 Integration Architecture

4. Security Architecture (15%)¶

Zero Trust security model
Identity and Access Management (IAM) design
Network security architecture
Data protection and encryption
Key management strategies
Security compliance and governance
Threat detection and response
Security monitoring and logging
DDoS protection and WAF

Security Architecture Resources: - 📖 Security Architecture - 📖 Zero Trust Architecture - 📖 IAM Architecture - 📖 IAM Best Practices - 📖 Network Security - 📖 Security Groups - 📖 Data Encryption - 📖 Key Protect - 📖 Hyper Protect Crypto Services - 📖 Secrets Manager - 📖 Security and Compliance Center - 📖 Certificate Manager - 📖 Cloud Internet Services - 📖 Activity Tracker

5. High Availability and Disaster Recovery (10%)¶

Multi-zone region (MZR) architecture
Disaster recovery strategies
Backup and restore planning
Business continuity planning
RTO and RPO requirements
Failover and failback procedures
Data replication strategies
Testing and validation

HA/DR Resources: - 📖 High Availability Architecture - 📖 Disaster Recovery Architecture - 📖 High Availability Overview - 📖 Disaster Recovery Overview - 📖 Regions and Zones - 📖 Backup Services - 📖 Veeam Backup - 📖 Database Backup Strategies

6. Performance and Scalability (10%)¶

Scalability patterns (horizontal, vertical)
Auto-scaling strategies
Performance optimization techniques
Caching strategies
CDN and edge computing
Database performance tuning
Application performance monitoring
Capacity planning
Load testing strategies

Performance Resources: - 📖 Scalability Architecture - 📖 Auto-Scaling - 📖 Performance Optimization - 📖 CDN with Cloud Internet Services - 📖 Caching Best Practices - 📖 Monitoring - 📖 Log Analysis

Core Architecture Components¶

Network Architecture Components¶

Compute Architecture Options¶

Storage Architecture Options¶

Database Architecture Options¶

Integration and Messaging¶

DevOps and Automation¶

Observability Services¶

Architecture Scenarios and Solutions¶

Scenario 1: Multi-Tier Web Application Architecture¶

Challenge: Design a highly available, scalable web application for e-commerce.

Architecture Components: - VPC with multi-zone deployment (3 zones) - Application Load Balancer for traffic distribution - Auto-scaling instance groups for web tier - Kubernetes cluster for application tier - PostgreSQL with High Availability for data tier - Redis for session and cache management - Object Storage for static assets and media - CDN (Cloud Internet Services) for global content delivery - Event Streams for asynchronous processing - Code Engine for background jobs - Monitoring and Log Analysis for observability - Activity Tracker for audit logging

Architecture Decisions: - Use MZR for 99.99% availability - Implement auto-scaling based on CPU and memory metrics - Use read replicas for database read operations - Implement circuit breakers and retry logic - Enable encryption at rest and in transit - Use IAM policies with least privilege

Resources: - 📖 Web Application Reference Architecture - 📖 E-Commerce Architecture

Scenario 2: Hybrid Cloud Architecture¶

Challenge: Connect on-premises data center with IBM Cloud securely and reliably.

Architecture Components: - VPC in IBM Cloud - Direct Link Dedicated or Connect for private connectivity - VPN Gateway as backup connection - Transit Gateway for multi-VPC connectivity - Satellite for extending IBM Cloud to on-premises - VMware Solutions for workload migration - Hybrid Cloud Mesh for application connectivity - Key Protect for key management - Secrets Manager for credential management

Architecture Decisions: - Use Direct Link for high-bandwidth, low-latency connectivity - Implement redundant connections for high availability - Use VPN as backup for Direct Link - Deploy firewall appliances in VPC - Implement consistent IAM across environments - Use Cloud Internet Services for DNS and DDoS protection

Resources: - 📖 Hybrid Cloud Architecture - 📖 Hybrid Cloud Connectivity - 📖 Satellite Architecture

Scenario 3: Microservices on Kubernetes¶

Challenge: Migrate monolithic application to microservices architecture.

Architecture Components: - OpenShift cluster with multi-zone deployment - Service mesh (Istio) for service-to-service communication - Container Registry for image management - API Connect for API gateway - Event Streams for event-driven communication - PostgreSQL for transactional databases - Cloudant for document storage - Redis for distributed caching - Object Storage for file storage - Continuous Delivery for CI/CD - Monitoring and Log Analysis - Security and Compliance Center

Architecture Decisions: - Decompose monolith using domain-driven design - Implement API gateway pattern - Use event-driven communication for loose coupling - Implement circuit breaker and bulkhead patterns - Use container health checks and readiness probes - Implement distributed tracing - Use GitOps for deployment automation

Resources: - 📖 Microservices Reference Architecture - 📖 Container Workload Architecture

Scenario 4: Serverless Event-Driven Architecture¶

Challenge: Build scalable event-driven system for IoT data processing.

Architecture Components: - Code Engine for event processing - Cloud Functions for real-time transformations - Event Streams (Kafka) for event ingestion - Cloudant for storing processed data - Object Storage for raw data archival - Watson IoT Platform for device management - Time Series Database for metrics - Grafana for visualization - API Connect for external API access

Architecture Decisions: - Use serverless for automatic scaling - Implement dead letter queues for failed events - Use event sourcing pattern - Implement CQRS for read/write separation - Use partitioning for parallel processing - Implement data retention policies - Use monitoring for function execution metrics

Resources: - 📖 Serverless Reference Architecture - 📖 Event-Driven Architecture - 📖 IoT Architecture

Scenario 5: Data Lake and Analytics Architecture¶

Challenge: Build scalable data lake for analytics and machine learning.

Architecture Components: - Object Storage for data lake storage - SQL Query for serverless SQL analytics - Watson Studio for data science and ML - Db2 Warehouse for data warehousing - DataStage for ETL processes - Cognos Analytics for business intelligence - Watson Machine Learning for model deployment - Databases for PostgreSQL for metadata - Event Streams for real-time data ingestion - Data Refinery for data preparation

Architecture Decisions: - Use zone-based storage tiers for cost optimization - Implement data catalog and metadata management - Use partitioning and bucketing for query performance - Implement data governance and lineage - Use encryption for sensitive data - Implement access controls with IAM - Use monitoring for query performance

Resources: - 📖 Data Architecture - 📖 Analytics Architecture - 📖 Machine Learning Architecture

Scenario 6: Multi-Cloud Architecture¶

Challenge: Design architecture spanning IBM Cloud, AWS, and Azure.

Architecture Components: - VPC in each cloud provider - Satellite for consistent control plane - Transit Gateway for IBM Cloud connectivity - VPN or Direct Connect for AWS connectivity - ExpressRoute for Azure connectivity - Multi-cloud API gateway - Centralized monitoring and logging - Centralized identity management - Multi-cloud backup and DR

Architecture Decisions: - Use Satellite for consistent Kubernetes experience - Implement cloud-agnostic abstractions - Use Terraform for infrastructure as code - Implement centralized logging aggregation - Use global load balancing - Implement data sovereignty requirements - Use cost optimization across clouds

Resources: - 📖 Multi-Cloud Architecture - 📖 Satellite Architecture

Architecture Best Practices¶

Design Principles¶

Loose Coupling: Design independent, loosely coupled components
High Cohesion: Group related functionality together
Separation of Concerns: Separate different aspects of the system
Single Responsibility: Each component has one well-defined purpose
DRY (Don't Repeat Yourself): Avoid duplication
KISS (Keep It Simple, Stupid): Prefer simple solutions
YAGNI (You Aren't Gonna Need It): Don't over-engineer
Fail Fast: Detect and handle errors early

Well-Architected Framework Pillars¶

Compute Selection Guidelines¶

Workload Type	Recommended Service	Reason
Legacy Apps	Virtual Servers, VMware	Lift and shift
Container Apps	Kubernetes, OpenShift	Orchestration needed
Event-Driven	Code Engine, Functions	Auto-scaling, pay-per-use
Batch Processing	Code Engine	Job-based execution
High Performance	Bare Metal	Raw compute power

Database Selection Guidelines¶

Use Case	Recommended Database	Reason
Transactional	PostgreSQL, Db2	ACID compliance
Document Store	Cloudant, MongoDB	Flexible schema
Caching	Redis	In-memory performance
Search	Elasticsearch	Full-text search
Time Series	Time Series DB	Time-based queries
Graph	Custom solution	Relationship queries

Security Architecture Best Practices¶

📖 Security Best Practices Guide
Implement defense in depth strategy
Use IAM for fine-grained access control
Enable encryption at rest and in transit
Use Key Protect or HPCS for key management
Implement network segmentation
Use security groups and ACLs
Enable audit logging with Activity Tracker
Implement vulnerability scanning
Use Secrets Manager for credentials
Implement DDoS protection
Regular security assessments
Implement least privilege principle

High Availability Best Practices¶

Deploy across multiple availability zones
Use managed services with built-in HA
Implement health checks and auto-recovery
Use load balancers for traffic distribution
Design for stateless applications
Implement auto-scaling
Use managed databases with automatic failover
Test failover procedures regularly
Implement graceful degradation
Monitor availability metrics

Performance Optimization Best Practices¶

Right-size compute resources
Use caching at multiple layers
Implement CDN for static content
Optimize database queries and indexes
Use connection pooling
Implement asynchronous processing
Use message queues for decoupling
Optimize network latency
Implement compression
Monitor performance metrics

Cost Optimization Best Practices¶

📖 Cost Optimization Guide
Right-size resources based on actual usage
Use reserved capacity for predictable workloads
Implement auto-scaling to match demand
Delete unused resources
Use appropriate storage tiers
Implement data lifecycle policies
Use serverless for variable workloads
Tag resources for cost tracking
Set budget alerts
Review costs regularly

Architecture Documentation¶

Architecture Decision Records (ADRs)¶

📖 ADR Templates
Document important architectural decisions
Include context, decision, and consequences
Capture alternatives considered
Keep ADRs version controlled
Review and update as needed

Architecture Diagrams¶

📖 IBM Cloud Architecture Diagrams
Use standard notation (e.g., UML, C4)
Include different views (logical, physical, deployment)
Show data flows and integrations
Highlight security boundaries
Document network topology
Use tools like draw.io or Lucidchart

Technical Specifications¶

System context and boundaries
Component descriptions
Interface specifications
Data models and schemas
Security controls
Performance requirements
Scalability requirements
Disaster recovery procedures

Exam Tips and Strategies¶

General Preparation¶

Study Reference Architectures: Understand IBM's reference architectures thoroughly
Hands-On Practice: Design and implement architectures in IBM Cloud
Case Studies: Review real-world customer case studies
Trade-Offs: Understand architectural trade-offs and decision criteria
Best Practices: Learn IBM Cloud best practices for each domain

Key Study Areas¶

VPC architecture and networking design
Multi-zone and multi-region deployment strategies
Compute service selection criteria
Database and storage architecture patterns
Security architecture and IAM design
High availability and disaster recovery planning
Microservices and container orchestration
Serverless architecture patterns
Hybrid and multi-cloud connectivity
Performance and scalability strategies
Cost optimization techniques
DevOps and automation architecture

Common Pitfalls to Avoid¶

Overlooking network design and IP address planning
Not considering availability zone failures
Ignoring data residency and compliance requirements
Under-provisioning for peak loads
Over-architecting simple solutions
Not planning for disaster recovery
Ignoring security in architecture design
Not considering cost implications
Missing integration and data flow requirements
Not documenting architectural decisions

Scenario-Based Questions¶

Read scenarios carefully - identify key requirements
Look for keywords: "high availability," "cost-effective," "secure," "scalable"
Consider all architecture layers (network, compute, data, security)
Think about trade-offs between options
Consider operational complexity
Evaluate cost implications
Think about future scalability needs

Exam Day Tips¶

Read each question twice before answering
Identify the primary requirement in scenario questions
Eliminate obviously wrong answers
Consider all aspects: performance, security, cost, scalability
Look for best practices in answer choices
Watch for keywords like "most," "best," "least expensive"
Flag uncertain questions for review
Manage time - don't spend too long on single questions
Review flagged questions if time permits
Trust your architectural judgment

Additional Learning Resources¶

IBM Cloud Architecture Center¶

Training and Courses¶

Case Studies and Customer Stories¶

Community and Support¶

Books and Whitepapers¶

📖 IBM Cloud Whitepapers
📖 IBM Redbooks

Important Exam Topics by Priority¶

High Priority (Study First)¶

VPC architecture and design
Multi-zone high availability patterns
Security architecture and IAM design
Compute service selection (IKS, OpenShift, Code Engine)
Database architecture and selection
Network architecture (load balancers, gateways, connectivity)
Disaster recovery planning
Microservices architecture patterns
Storage architecture and selection
Cost optimization strategies

Medium Priority (Study Second)¶

Serverless architecture patterns
Hybrid cloud connectivity (Direct Link, VPN)
Event-driven architecture
API management architecture
DevOps and CI/CD architecture
Monitoring and observability architecture
Data architecture and analytics
Multi-cloud architecture
Performance optimization techniques
Compliance and governance architecture

Lower Priority (If Time Permits)¶

Specific Watson service architectures
IoT architecture patterns
Edge computing with Satellite
Advanced networking scenarios
VMware solutions architecture
Blockchain architecture
Quantum computing integration

Architecture Checklists¶

Architecture Review Checklist¶

Security Architecture Checklist¶

High Availability Checklist¶

Final Preparation Checklist¶

Good luck with your IBM Cloud Solution Architect certification exam!

Remember: Architecture is about making informed trade-offs. Focus on understanding the "why" behind architectural decisions, not just the "what." Consider multiple dimensions - functionality, performance, security, cost, and operational complexity - when evaluating solutions.