IBM Cloud Professional SRE study materials
IBM Cloud Professional SRE study resources

IBM Cloud Professional SRE case studies

IBM Cloud Professional SRE · Put your knowledge to work in context.

The IBM Cloud Professional SRE credential is listed in this site's exam catalogue under the aliases "IBM Certified Professional SRE - Cloud", with six knowledge domains: SRE foundations; monitoring, observability and incident response; automation and infrastructure as code; IBM Cloud platform operations and architecture; reliability engineering, capacity and performance; and security, compliance and governance. Two important caveats apply before you build a study plan. The IBM Cloud Professional SRE case studies are 5 cases and about 3,264 words.

1

Intermittent 502s at 02:00 UTC on a Dallas IKS Cluster

A checkout service runs on IBM Cloud Kubernetes Service in us-south across three zones: 12 worker nodes (8 vCPU/32 GB), 60 pods of a Node.js API behind a VPC Application Load Balancer. The SLO is 99.95% successful requests over 30 days.

697 words, about 3 min
2

Terraform Drift After a 02:00 Security-Group Hotfix

A platform team manages production VPC and IBM Cloud Kubernetes Service with IBM Cloud Schematics workspaces; each environment has its own workspace and state. During a 02:00 incident, an engineer edited an existing Terraform-managed security-group rule from the partner's /32 to 0.0.0.0/0 so an external partner could reach a debug endpoint.

709 words, about 4 min
3

HPA Scale-Out Meets a 100-Connection PostgreSQL Ceiling

A Java service on Red Hat OpenShift on IBM Cloud runs on six 16 vCPU/64 GB workers. The HPA is set to 8–40 pods on 70% CPU, and each pod uses HikariCP with a maximum pool of 10.

634 words, about 3 min
4

Audit Finding on a 4 TB COS Bucket with BYOK

An audit of a 4 TB IBM Cloud Object Storage bucket in us-south finds three issues: the bucket has public access enabled so a marketing site can read objects directly; a service ID with Writer access has its API key stored in a CI repository; and Activity Tracker events are not routed to the SIEM. The bucket uses Key Protect with a customer root key, versioning is on, and there is no lifecycle policy.

637 words, about 3 min
5

Active-Passive Failover with a 12-Minute Replication Lag

An active-passive service runs on Red Hat OpenShift on IBM Cloud in Dallas, with a warm standby in Frankfurt. Cloud Internet Services global load balancer health checks move traffic when the Dallas endpoint fails.

587 words, about 3 min