First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Unverified - official content domains not published on the source page
An administrator is planning a deployment of IBM Cloud Pak for Integration on OpenShift. Which component provides the shared, cluster-wide capability that lets product capabilities such as API management and messaging be installed and managed as independent operators?
- The IBM Cloud Pak CLI plugin for kubectl
- The Platform UI and foundational services layer Correct answer.
- The OpenShift integrated image registry
- The individual capability operator for each product
Explanation
Cloud Pak for Integration relies on a shared platform layer (foundational services plus the Platform UI) that is installed once per cluster and provides identity, licensing, and catalog services. Individual capability operators are installed on top of that foundation rather than replacing it.
Question 2Unverified - official content domains not published on the source page
A team wants to expose an existing REST service through IBM API Connect and enforce a rate limit of 100 calls per minute per client application. Which artifact should they create to hold the rate-limiting policy?
- A TLS server profile on the gateway
- An assembly flow within the API definition Correct answer.
- A DataPower cryptographic key object
- A product plan in the developer portal
Explanation
Rate limiting in API Connect is enforced by a rate-limit policy placed in the assembly flow of the API definition, where the processing logic of the API is described. Plans govern which APIs are offered and their approval and quota metadata, but the runtime enforcement logic lives in the assembly.
Question 3Unverified - official content domains not published on the source page
In IBM MQ, a queue manager must route messages to a remote queue manager without the sending application knowing the destination. Which object should the administrator define on the sending queue manager?
- A local queue with the same name as the target queue
- A model queue with a temporary dynamic setting
- A remote queue definition pointing to a transmission queue Correct answer.
- An alias queue that resolves to a topic
Explanation
A remote queue definition holds the name of the target queue, the target queue manager, and the transmission queue used to reach it, so the application only names the remote queue. The transmission queue is a local queue that holds messages destined for the remote queue manager until the channel moves them.
Question 4Unverified - official content domains not published on the source page
An integration specialist is building a flow in IBM App Connect Enterprise that must call a REST endpoint and transform the JSON response into a fixed-length record for a legacy system. Which pair of node types most directly supports this requirement?
- HTTPRequest and a mapping node Correct answer.
- MQInput and a trace node
- FileInput and a throw node
- TimeoutControl and a label node
Explanation
The HTTPRequest node issues outbound REST calls, and a mapping node (such as the Mapping node or Compute node) transforms the parsed JSON into the required fixed-length format. Together they cover the call and the transformation steps.
Question 5Unverified - official content domains not published on the source page
An operator needs to back up the configuration of an IBM API Connect subsystem running in Kubernetes. Which approach aligns with the documented backup model for the subsystem's persistent data?
- Export the Kubernetes Deployment YAML and treat it as the backup
- Run the subsystem's backup CR and store the resulting archive off-cluster Correct answer.
- Copy the container images to a second registry
- Snapshot the worker node disks with the hypervisor tool
Explanation
API Connect subsystems expose backup custom resources that produce a consistent archive of configuration and persistent data, which must then be stored off-cluster. Node-level or manifest-level copies do not capture the state held in the subsystem's databases.
Question 6Unverified - official content domains not published on the source page
A queue manager must guarantee that messages survive a queue manager restart. Which combination of settings is required in IBM MQ?
- Non-persistent messages on a temporary dynamic queue
- Persistent messages on queues that are defined with default persistence and logged Correct answer.
- Persistent messages on a queue whose usage is set to transmission
- Non-persistent messages with the queue manager in fast recovery mode
Explanation
Persistence is a property of the message, and the queue's default persistence determines what applications get unless they override it. Persistent messages are written to the log and recovered after restart, whereas non-persistent messages are lost.
Question 7Unverified - official content domains not published on the source page
An integration developer needs to apply a policy to an API in IBM API Connect that rejects requests missing an OAuth scope before the backend is invoked. Where should the policy be placed to satisfy this requirement?
- In the plan definition after subscription approval
- In the developer portal's visibility settings
- In the gateway's TLS client profile
- In the assembly before the invoke policy Correct answer.
Explanation
Assembly policies execute in sequence, so a security or validate policy placed before the invoke policy rejects unauthorized requests before any backend call occurs. Plan and portal settings control subscription and visibility rather than per-request enforcement.
Question 8Unverified - official content domains not published on the source page
Which IBM MQ channel type is used for a one-way message flow from a sender to a receiver across queue managers, where the sender initiates the connection?
- A server-connection channel
- A requester-server channel
- A cluster receiver channel
- A sender-receiver channel pair Correct answer.
Explanation
A sender channel on the originating queue manager initiates the connection to a receiver channel on the target queue manager, forming a one-way message channel pair. Server-connection and requester-server channels serve client connections rather than queue manager to queue manager traffic.
Question 9Unverified - official content domains not published on the source page
A company wants event-driven integration where changes in a SaaS application trigger a flow in IBM App Connect. Which capability should they use?
- An event-driven flow with a configured trigger endpoint Correct answer.
- A message flow with an MQInput node
- A scheduled flow that polls every hour
- A subflow invoked by another message flow
Explanation
Event-driven flows in App Connect start when the connected application sends a notification to a generated trigger endpoint, enabling near real-time processing. Polling or MQ-based flows require an explicit schedule or message arrival rather than a SaaS event.
Question 10Unverified - official content domains not published on the source page
An API Connect administrator must ensure that a consumer application can call an API only after approval. Which configuration enforces this?
- An assembly policy that checks an API key
- A gateway extension that blocks unknown clients
- A plan that requires subscription approval Correct answer.
- A catalog setting that hides the API
Explanation
Setting a plan to require approval means a subscription request stays pending until a provider approves it, and credentials are issued only afterward. Hiding the API or adding key checks does not implement an approval workflow.
Question 11Unverified - official content domains not published on the source page
In IBM MQ, what is the purpose of a dead-letter queue?
- To buffer messages when a queue reaches its maximum depth
- To archive all messages for audit purposes
- To hold messages that a queue manager cannot deliver to their intended destination Correct answer.
- To store messages awaiting a channel's transmission retry
Explanation
When a queue manager cannot route or deliver a message, for example because the target queue is missing or full, it places the message on the dead-letter queue so it is not lost. Administrators then inspect and resolve those messages.
Question 12Unverified - official content domains not published on the source page
A solution architect is comparing IBM Cloud Pak for Integration capabilities. Which capability is designed primarily for high-volume, low-latency messaging between applications?
- IBM App Connect Enterprise
- IBM API Connect
- IBM Event Streams Correct answer.
- IBM DataPower Gateway
Explanation
Event Streams is the Kafka-based event streaming capability, built for high-throughput, low-latency publish and subscribe messaging. API Connect, App Connect, and DataPower address API lifecycle, application integration, and gateway security respectively.
Question 13Unverified - official content domains not published on the source page
An integration developer must transform a hierarchical JSON payload into a flat structure and enrich it with a lookup value. Which IBM App Connect Enterprise node best supports the enrichment step?
- A Mapping node with a database or cache lookup Correct answer.
- A ResetContentDescriptor node
- An MQOutput node
- A FlowOrder node
Explanation
The Mapping node can perform transformations and add computed or looked-up values, including database or cache lookups, in a single graphical mapping. The other nodes handle output, sequencing, or message parsing rather than enrichment.
Question 14Unverified - official content domains not published on the source page
A queue manager in a multi-instance IBM MQ configuration on Linux must be highly available. Which shared resource is required for the queue manager's data?
- A shared file system that both instances can access Correct answer.
- An NFS mount used only by the standby instance
- A block device attached to a single node
- A local disk replicated by the queue manager
Explanation
Multi-instance queue managers rely on a shared file system, such as a networked cluster file system, so that the active and standby instances can access the same queue manager data. The standby takes over the shared data when the active instance fails.
Question 15Unverified - official content domains not published on the source page
An API Connect developer needs to convert a SOAP back end into a REST-style API for mobile clients. Which approach fits the gateway's capabilities?
- Use a TLS profile to translate the SOAP envelope
- Define a REST API whose assembly invokes the SOAP service and maps the payload Correct answer.
- Create a plan that exposes the SOAP operations unchanged
- Publish the WSDL directly in the developer portal
Explanation
API Connect can expose a REST API and use assembly policies, including a web service or invoke policy plus mapping, to call the SOAP back end and reshape the payload. Publishing the WSDL exposes SOAP rather than a REST interface.
Question 16Unverified - official content domains not published on the source page
Which statement best describes the role of a catalog in IBM API Connect?
- It is the physical gateway appliance that enforces policies
- It is the repository of container images for the subsystem
- It is the OAuth provider that issues access tokens
- It is a logical partition that groups APIs, products, and consumer organizations for a lifecycle stage Correct answer.
Explanation
A catalog provides an isolated environment, typically aligned to a lifecycle stage such as development, test, or production, holding its own APIs, products, subscriptions, and consumer organizations. Gateways enforce policies, and the OAuth provider issues tokens, but neither is the catalog.
Question 17Unverified - official content domains not published on the source page
An administrator must let an application put messages to a queue but must prevent it from getting messages from that queue. Which IBM MQ authorization approach achieves this?
- Place the queue in a cluster without a cluster channel
- Grant put authority on the queue and omit get authority for that principal Correct answer.
- Set the queue's maximum message length to zero
- Define the queue with the inhibit get attribute
Explanation
Object authority manager profiles grant specific authorities such as put and get per principal, so granting put while withholding get enforces one-way access. Inhibit attributes and message length limits affect all users and do not provide per-principal control.
Question 18Unverified - official content domains not published on the source page
In IBM App Connect Enterprise, what is the effect of deploying a BAR file to an integration server?
- It copies the integration node configuration to another node
- It backs up the integration server's persistent state
- It compiles Java source into the integration node's runtime
- It installs the contained message flows and resources so they start running on that server Correct answer.
Explanation
A BAR file packages compiled message flows and their dependent resources, and deploying it makes those flows available and running on the target integration server. It is not a compilation step, a configuration copy, or a backup mechanism.
Question 19Unverified - official content domains not published on the source page
A security architect wants IBM DataPower Gateway to validate incoming JSON against a schema before forwarding to a back end. Which processing action is appropriate?
- A AAA action configured for basic authentication
- A route action that selects a back end by URL
- A transform action that converts JSON to XML
- A validate action using a JSON schema in the processing policy Correct answer.
Explanation
The validate action checks a message against a schema, and DataPower supports JSON schema validation for JSON payloads. Authentication, transformation, and routing actions perform different functions and do not validate the payload structure.
Question 20Unverified - official content domains not published on the source page
An integration team needs to ensure that a message flow in IBM App Connect Enterprise can be retried automatically when a transient back-end failure occurs. Which feature should they use?
- A retry mechanism configured on the relevant node or via a failure-handling subflow Correct answer.
- A second integration server in the same integration node
- An MQ dead-letter queue on the input queue
- A larger heap size for the integration server
Explanation
Retry behavior for transient failures is implemented through node-level retry settings or explicit failure-handling flows that catch and reprocess the error. Heap size, dead-letter queues, and extra servers do not implement automated retry logic.
Question 21Unverified - official content domains not published on the source page
A company must keep message data encrypted at rest on the queue manager's disks. Which IBM MQ feature addresses this requirement?
- Channel authentication records
- Message segmentation
- Encrypted queue manager data using the operating system or MQ encryption facilities Correct answer.
- TLS channels between queue managers
Explanation
Protecting data at rest requires encryption of the queue manager's stored data, for example through encrypted file systems or the encryption facilities available for MQ data. TLS protects data in transit, and channel authentication controls who may connect.
Question 22Unverified - official content domains not published on the source page
Which IBM Cloud Pak for Integration capability provides a unified developer portal where consumers discover and subscribe to APIs?
- IBM API Connect Correct answer.
- IBM Aspera
- IBM Event Streams
- IBM MQ
Explanation
API Connect includes the developer portal, where consumer organizations discover published APIs, request subscriptions, and obtain credentials. The other capabilities provide messaging, event streaming, or high-speed transfer rather than an API consumer portal.
Question 23Unverified - official content domains not published on the source page
An administrator is troubleshooting why messages accumulate on a transmission queue in IBM MQ. Which condition most directly explains the backlog?
- The message persistence is set to persistent
- The local queue's maximum depth is set too high
- The dead-letter queue is defined on the remote queue manager
- The sender channel to the remote queue manager is stopped or retrying Correct answer.
Explanation
A transmission queue holds messages until the associated sender channel moves them, so a stopped or failing channel causes a backlog. Persistence, queue depth settings, and remote dead-letter configuration do not by themselves stop transmission.
Question 24Unverified - official content domains not published on the source page
A developer must secure an API in IBM API Connect so that only requests presenting a valid JWT with an expected claim are accepted. Which assembly policy is most appropriate?
- A rate limit policy set to one request per second
- An XML to JSON conversion policy
- A JWT validate policy configured with the required claim Correct answer.
- A set variable policy that adds a header
Explanation
The JWT validate policy verifies the token signature and can check claims, rejecting requests that fail validation. Rate limiting, format conversion, and variable assignment do not authenticate token contents.
Question 25Unverified - official content domains not published on the source page
An integration architect is designing a solution that requires exactly-once processing semantics across a message flow that writes to a database. Which design consideration is most important?
- Increasing the number of instances of the message flow
- Setting the input queue to non-persistent
- Coordinating message acknowledgement with the database transaction so both commit or both roll back Correct answer.
- Using a larger backout threshold on the input queue
Explanation
Exactly-once behavior depends on coordinating the messaging transaction with the database transaction, typically through transactional scope and two-phase commit support, so a failure cannot leave one side committed. Scaling instances or tuning persistence and backout thresholds does not guarantee atomicity.
Question 26Unverified - official content domains not published on the source page
Which IBM MQ object is used by a queue manager to store messages that cannot be routed to their intended destination queue?
- The transmission queue
- The initiation queue
- The alias queue
- The dead-letter queue Correct answer.
Explanation
The dead-letter queue is a normal local queue nominated by the queue manager to hold messages that cannot be delivered, for example because the target queue is full or does not exist. Administrators inspect it to diagnose routing failures.
Question 27Unverified - official content domains not published on the source page
In IBM API Connect, which artifact defines the runtime behavior and interface of an API, including paths and operations?
- The API definition Correct answer.
- The product
- The application
- The catalog
Explanation
The API definition holds the OpenAPI-based interface and the assembly logic that determines how requests are handled at runtime. It is packaged into products and published to catalogs for consumers.
Question 28Unverified - official content domains not published on the source page
In IBM App Connect Enterprise, which component is the runtime process that hosts deployed message flows and is created from a broker?
- The integration node
- The integration server Correct answer.
- The message model
- The BAR file
Explanation
An integration server is the runtime container in which deployed message flows and their resources execute. In App Connect Enterprise it is created from an integration node and can be managed independently.
Question 29Unverified - official content domains not published on the source page
Which IBM Cloud Pak for Integration capability provides a unified self-service developer portal where consumers discover and subscribe to APIs?
- IBM MQ
- IBM DataPower Gateway
- IBM Event Streams
- IBM API Connect Correct answer.
Explanation
API Connect includes the developer portal where API consumers browse products, register applications, and subscribe to plans. It combines API management, gateway, and portal functions.
Question 30Unverified - official content domains not published on the source page
In IBM MQ, which attribute on a queue controls the maximum number of messages it can hold before further puts are rejected?
- DEFPSIST
- TRIGGER
- MAXDEPTH Correct answer.
- MAXMSGL
Explanation
MAXDEPTH sets the maximum number of messages a queue may contain; when the queue is full, puts fail unless the application handles the condition. MAXMSGL instead limits the size of a single message.
Question 31Unverified - official content domains not published on the source page
An API Connect developer wants a gateway policy that rejects requests whose HTTP header lacks a specific value. Which policy type applies?
- A map policy
- A redact policy
- An invoke policy
- A validate policy Correct answer.
Explanation
A validate policy compares request content, including headers, against defined conditions and can reject the request with an error when the condition is not met. This makes it suitable for header-based admission checks.
Question 32Unverified - official content domains not published on the source page
In IBM App Connect Enterprise, what does a Mapping node primarily do within a message flow?
- It transforms an input message into an output message using graphical field mappings Correct answer.
- It publishes events to a Kafka topic
- It serializes messages to a remote queue manager
- It starts a transaction and commits it
Explanation
The Mapping node provides a graphical editor to define how input fields populate output fields, including expressions and transforms. It is the standard tool for structural message transformation in a flow.
Question 33Unverified - official content domains not published on the source page
Which IBM MQ channel type carries messages in one direction from a sending queue manager to a receiving queue manager?
- A server-connection channel
- A sender-receiver channel pair Correct answer.
- A cluster-receiver channel
- A requester-server channel
Explanation
A sender channel on the originating queue manager pairs with a receiver channel on the target to move messages one way across the network. The transmission queue feeds the sender channel.
Question 34Unverified - official content domains not published on the source page
An administrator must let an application put messages to a queue but prevent it from retrieving them. Which IBM MQ authorization approach enforces this?
- Enable SSLPEER on the channel
- Grant put authority on the queue and withhold get authority for that principal Correct answer.
- Set MAXDEPTH to zero on the queue
- Set the queue to DEFPSIST and restrict the channel
Explanation
IBM MQ object authority manager checks separate put and get authorities, so granting only put authority limits the principal to producing messages. Withholding get authority blocks retrieval while allowing production.
Question 35Unverified - official content domains not published on the source page
A queue manager must keep messages recoverable after a restart. Which message attribute must the application set, together with appropriate log configuration?
- Set the message priority to maximum
- Set the message to persistent Correct answer.
- Set the message to non-persistent
- Set the message expiry to unlimited
Explanation
Persistent messages are written to the queue manager's logs and recovered after restart, provided logging is configured to support recovery. Non-persistent messages may be lost across a restart.
Question 36Unverified - official content domains not published on the source page
An integration developer must enrich a message in IBM App Connect Enterprise by calling a REST service and merging the response. Which node is most appropriate?
- A Compute node
- An HTTPRequest node Correct answer.
- A FlowOrder node
- A Throw node
Explanation
The HTTPRequest node issues an outbound HTTP or REST call and returns the response to the flow, which can then be merged with the original message. It is designed for synchronous service invocation.
Question 37Unverified - official content domains not published on the source page
In IBM API Connect, what is the role of a plan within a product?
- It stores the OpenAPI document for the API
- It hosts the gateway runtime
- It defines rate limits and approval requirements that consumers accept when subscribing Correct answer.
- It authenticates the API manager user
Explanation
A plan packages access conditions such as rate limits and subscription approval that an application accepts to use the APIs in a product. Multiple plans can expose the same API under different terms.
Question 38Unverified - official content domains not published on the source page
Which IBM DataPower Gateway feature validates an inbound XML document against a schema before the request reaches the back end?
- A AAA policy
- A XML schema validation policy in a processing rule Correct answer.
- A load balancer group
- A SSL client profile
Explanation
DataPower processing rules can include a validate action that checks XML against a referenced schema and rejects invalid documents. This enforces structural correctness at the gateway.
Question 39Unverified - official content domains not published on the source page
A team wants App Connect Enterprise to retry a failed flow automatically. Which mechanism supports configurable retry behavior on a message flow?
- Configuring a retry policy on the input node Correct answer.
- Setting the flow's transaction mode to automatic
- Setting the flow's additional instances to zero
- Enabling the flow's monitoring events
Explanation
Input nodes can reference a retry policy that defines how many times and how often the flow is retried after a failure, including backoff behavior. This provides controlled automatic retries.
Question 40Unverified - official content domains not published on the source page
In IBM MQ, which component is responsible for reading the transmission queue and moving messages over a channel?
- The listener
- The command server
- The channel initiator Correct answer.
- The trigger monitor
Explanation
The channel initiator is the process that starts sender channels and moves messages from transmission queues to their remote partners. It runs alongside the queue manager on the sending side.
Question 41Unverified - official content domains not published on the source page
An API Connect developer wants to cache a back-end response for a short period to reduce load. Which policy supports this?
- A set-variable policy
- A response cache policy Correct answer.
- A invoke policy
- A json-to-xml policy
Explanation
A response cache policy stores responses keyed by configurable criteria and serves them until the cache entry expires, reducing back-end calls. It is placed before the invoke policy in the assembly.
Question 42Unverified - official content domains not published on the source page
Which IBM Cloud Pak for Integration capability is best suited to high-throughput event streaming with topic-based pub/sub semantics?
- IBM API Connect
- IBM MQ
- IBM Event Streams Correct answer.
- IBM Aspera
Explanation
Event Streams is based on Apache Kafka and provides partitioned, replicated topics for high-throughput event streaming and replay. It differs from queue-based messaging in IBM MQ.
Question 43Unverified - official content domains not published on the source page
An administrator sees messages accumulating on a transmission queue and no delivery to the remote queue manager. Which condition most directly explains this?
- The receiver channel has SSLPEER configured
- The dead-letter queue is empty
- The local queue has MAXDEPTH set to zero
- The sender channel is stopped or retrying Correct answer.
Explanation
Messages accumulate on a transmission queue when the associated sender channel cannot move them, for example because it is stopped, retrying, or the network path is down. Checking channel status reveals the cause.
Question 44Unverified - official content domains not published on the source page
A developer must secure an API in API Connect so that only requests with a valid JWT containing a specific claim are accepted. Which combination fits?
- An invoke policy followed by a map policy
- A redact policy followed by a set-variable policy
- A JWT validate policy followed by a conditional check on the claim Correct answer.
- A json-to-xml policy followed by a response cache policy
Explanation
A JWT validate policy verifies the token signature and extracts claims, and a conditional check then enforces the required claim value. Together they provide claim-based admission control.
Question 45Unverified - official content domains not published on the source page
In IBM API Connect, which object represents a consumer's credentials and is used to subscribe to a plan?
- The gateway service
- The catalog
- The product
- The application Correct answer.
Explanation
A consumer registers an application, which holds client credentials and subscribes to a plan to obtain access. The application is the unit of subscription and credential ownership.
Question 46Unverified - official content domains not published on the source page
An architect needs exactly-once style processing across a message flow that writes to a database and puts a message to IBM MQ. Which design consideration is most important?
- Disabling flow monitoring
- Coordinating the database commit and MQ put within a single unit of work where supported Correct answer.
- Increasing the number of additional instances
- Setting all messages to non-persistent
Explanation
Atomicity across a database and MQ requires both operations to participate in the same unit of work, using XA coordination where supported, so that both commit or both roll back. Without this, partial failures can duplicate or lose work.
Question 47Unverified - official content domains not published on the source page
A queue manager must be configured so that messages exceeding a defined age are discarded rather than delivered late. Which technique achieves this?
- Set the queue to DEFPSIST and increase MAXDEPTH
- Set the message expiry to a finite value and enable expiry processing on the queue Correct answer.
- Enable trigger messages on the queue
- Set the message persistence to persistent
Explanation
Setting a finite expiry on the message and enabling expiry processing causes the queue manager to discard expired messages instead of delivering them. This prevents stale data from reaching consumers.
Question 48Unverified - official content domains not published on the source page
In IBM DataPower Gateway, a request must be authenticated against an external LDAP directory and authorized based on group membership. Which policy type is used?
- A map policy
- An AAA policy Correct answer.
- A XML firewall policy
- A SSL server profile
Explanation
An AAA policy performs authentication, authorization, and auditing, and can consult an external LDAP directory for credentials and group membership. It is the standard mechanism for identity enforcement at the gateway.
Question 49Unverified - official content domains not published on the source page
An integration team needs to guarantee ordered delivery of related messages through IBM MQ. Which approach preserves order for a group of messages?
- Set all messages to non-persistent
- Distribute messages across many transmission queues
- Use message groups with the group identifier and sequence properties Correct answer.
- Enable trigger messages on the destination queue
Explanation
Message grouping with group identifiers and sequence numbers lets the queue manager and applications preserve the order of related messages, even with competing consumers. This is the supported ordering mechanism.
Question 50Unverified - official content domains not published on the source page
An API Connect developer needs to transform a JSON request into a SOAP call to a legacy back end. Which policy combination fits best?
- A response cache policy followed by a redact policy
- A json-to-xml policy followed by an invoke policy targeting the SOAP service Correct answer.
- A JWT validate policy followed by a set-variable policy
- A rate limit policy followed by an activity log policy
Explanation
Converting JSON to XML with the json-to-xml policy prepares the payload for a SOAP service, and the invoke policy then sends the request to the back end. This combination bridges REST clients to SOAP services.