IBM Cloud Security Engineer case studies
IBM Cloud Security Engineer · Put your knowledge to work in context.
The IBM Cloud Security Engineer credential is listed by IBM as exam C1000-117, and candidates often search for it under that code or as the IBM Certified Cloud Security Engineer. This page is an independent study resource: it is not affiliated with, endorsed by, or operated by IBM, and it does not host or reproduce official exam content. Before you build a study plan, note a significant caveat. When IBM's training site was retrieved on 5 November 2026, the exam URL redirected to a page reading "Certification not found", with the message that the certification "does not exist or is not available." That means the exam's current status, question count, time limit, passing score, fee, retake policy, and validity period could not be verified from the official source and are shown as unknown on this page rather than estimated. The IBM Cloud Security Engineer case studies are 5 cases and about 4,021 words.
1Consolidated account becomes a blast-radius problem
A 240-person enterprise runs all IBM Cloud workloads in a single account. Twelve resource groups mix production, staging, and sandbox; most IAM policies are granted at account scope.
795 words, about 4 min2Long-lived CI/CD API keys after a contractor departure
A platform team supports 35 CI/CD pipelines on IBM Cloud. Each pipeline authenticates with a service ID API key stored as a toolchain environment variable.
793 words, about 4 min3Cross-region key reuse for regulated object storage
A lender stores 4 TB of loan documents in two IBM Cloud Object Storage buckets: one in us-south and one in eu-de. Both buckets use a single Key Protect instance in us-south and one root key.
839 words, about 4 min4Public SSH and private service access in a VPC
A public web application runs in a VPC in us-south with three subnets: public load balancer, application VMs, and database. The application VMs read from COS and call Key Protect over public endpoints.
773 words, about 4 min5Seven-day logs and a suspicious mass download
A security team routes IBM Cloud Activity Tracker events to IBM Cloud Logs in one region with 7-day retention. There are no alerts.
821 words, about 4 min