For securing a multi-tier web application in IBM Cloud, which combination of services should be considered? (Select two)

Question

Options

• AIBM Cloud Activity Tracker for monitoring user activities
• BIBM Cloud Databases for data storage
• CIBM Cloud Internet Services for DDoS protection and CDN
• DIBM Cloud Key Protect for managing encryption keys

• A
  76% (25)
• B
  15% (5)
• D
  9% (3)

Explanation

Securing a multi-tier web app requires both threat defense at the network edge and visibility into what's happening inside - which is exactly what C (IBM Cloud Internet Services) and A (IBM Cloud Activity Tracker) provide together. IBM Cloud Internet Services delivers DDoS mitigation, a Web Application Firewall, and CDN capabilities that protect the application before malicious traffic even reaches your servers, while Activity Tracker creates an audit log of user and admin actions, enabling detection of suspicious behavior and satisfying compliance requirements.

B is wrong because IBM Cloud Databases is purely a managed storage service - it contributes nothing to threat protection, monitoring, or access control on its own.

D is a tempting distractor: Key Protect does handle encryption key management (a valid security concern), but it addresses data-at-rest confidentiality rather than active web application threats or audit visibility - making it less directly relevant to securing the application in the way the question intends.

Memory tip: Think "guard the gate, watch the house" - Internet Services guards the gate (external threats), Activity Tracker watches the house (internal activity). Databases store things; Key Protect locks things - neither actively secures a running web application.

No community discussion yet for this question.