QUESTION: 17
Which command correlates clients in a domain to a schedule?

A. BIND NODE
B. BIND SCHEDULE
C. SET ASSOCIATION
D. DEFINE ASSOCIATION

Answer(s): D
QUESTION: 18
In order to enforce retention and versioning policies, which IBM Tivoli Storage Manager V6.3
process determines when files are no longer needed?

A. migration
B. expiration
C. reclamation
D. copy active-data pool

Answer(s): B
QUESTION: 19
A file is archived to IBM Tivoli Storage Manager (TSM) for one year. It is then immediately
deleted from the source server. What happens to the archive data for this file in TSM?

A. It is kept in TSM for one year, then it expires.
B. It is deleted during the next expiration process.
C. It is kept until the Retain Only Version parameter is met.
D. It is kept until the versions Data Deleted parameter is met.

Answer(s): A
QUESTION: 20
There is a problem on a Windows system that has backed up its data to IBM Tivoli Storage
Manager. The server retains unlimited versions for at least four days. It appears a user has
caused corruption in a certain directory. The customer wants to check what has been changed
and wants the data restored from that directory as it was three days ago so the contents can be
compared. Which client option makes this possible?

A. TOC restore
B. restore latest
C. if newer restore
D. point-in-time restore

Answer(s): D

Viewing page 9 of 25
Viewing questions 33 - 36 out of 96 questions

Post your Comments and Discuss IBM I2010-579 exam dumps with other Community members:

Comments:

Name:

I2010-579 Exam Discussions & Posts (Share your experience with others)

Community-Verified AI Explanation Commented on April 28, 2026
Question 36:

Correct answer: IDS

Why:

- An IDS (Intrusion Detection System) monitors and analyzes traffic for suspicious activity and generates alerts, usually in a passive, out-of-band position (e.g., on a SPAN port or TAP). This means it can analyze attacks from the internet without being in the data path, so it doesn’t add latency. - An IPS (Intrusion Prevention System) is inline and can block or modify traffic. While it provides active protection, it can introduce processing delays and affect latency. - A Firewall filters traffic based on policies, which can add some latency but is not primarily an analysis tool. - A Load balancer distributes traffic and isn’t used for attack analysis.
So, for observing attacks without impacting latency, an IDS is the appropriate choice.
Tadcaster, United Kingdom

Lawrence James Commented on April 28, 2026
I find it very informative. the questions are laid out easy which means you can do several questions extremely fast.
Tadcaster, United Kingdom

Community-Verified AI Explanation Commented on April 28, 2026
Question 55:

Correct answer: A. Code repositories.

Why this is correct:

- Developers sometimes commit credentials (API keys, access tokens) into code or config files in code repositories. If those keys are exposed (even in private repos or via history), cloud services can be accessed by anyone who gets the keys.

Why the other options are less likely as the common source:

- Dark web: a place for exposed credentials after leakage, not the primary cause of inadvertent leakage in cloud setups. - Threat feeds: provide indicators, not the root cause of credential leakage. - State actors: target breaches, not the typical inadvertent leakage source. - Vulnerability databases: catalog vulnerabilities, not credentials.

Key concepts and best practices:

- Use secret management (e.g., AWS Secrets Manager, Azure Key Vault) instead of hard-coded secrets. - Implement secret scanning in IDEs/CI (e.g., detect secrets in commits). - Rotate credentials, enforce least privilege, and use short-lived tokens or roles.
Ikeja, Nigeria

Community-Verified AI Explanation Commented on April 28, 2026
Question 52:

Correct answer: D. Block the URL shortener domain in the web proxy.

Why this is correct:

- The emails use a single URL shortener to hide the final (dead) destination. Blocking that shortener domain at the web proxy prevents users from reaching any of those shortened links, stopping the threat from propagating across multiple inboxes.

Why the other options are less effective:

- A: Blocking all subject lines is impractical; attackers can change subjects easily. - B: Sending the dead domain to a DNS sinkhole aids analysis but does not prevent users from receiving or clicking links in the moment. - C: Quarantining all emails is thorough but can disrupt legitimate mail and is slower than a targeted block.

Additional tips:

- After blocking, monitor for new shorteners being used and update filters. - Consider user awareness training and additional URL reputation controls.
Ikeja, Nigeria

Shailendu Dwivedi Commented on April 28, 2026
It is really helpful
Noida, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 102:

Correct answer: A. Further review closed unactioned alerts to identify mishandling of threats.

Why this is best:

It validates management’s claim by gathering evidence. Closed alerts without action may indicate weak threat response, misclassification, or policy gaps.

A risk-based, evidence-led approach helps determine the actual impact and root causes before taking broader actions.

It informs whether further actions are needed (policy changes, training, process improvements) rather than jumping to conclusions or omitting the finding.

Why not other options:

Reopening unactioned alerts and reporting to the audit committee moves too quickly to formal escalation without first understanding scope and impact.

Recommending policy/training improvements is forward-looking but not the first step without evidence from a detailed review.

Omitting the finding is inappropriate when there is potential risk demonstrated by unaddressed alerts.

Riyadh, Saudi Arabia

Community-Verified AI Explanation Commented on April 28, 2026
Question 28:

Correct answer: A)

Why: Azure Government is a separate, sovereign cloud region intended for U.S. government needs. It serves:

- U.S. government agencies (federal, state, local) - approved government contractors/partners who support government workloads
It provides compliance and data residency specific to government workloads (e.g., FedRAMP High, DoD alignment). It is not available to general public or non-government customers.
Bengaluru, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 25:

Correct answer: C) Configure a Point-to-Site (P2S) VPN

Why: A Point-to-Site (P2S) VPN lets individual remote client computers securely connect to an Azure VNet. This is exactly what remote users need to access VNet1 from outside Azure.

Why not the others:

- Site-to-Site (S2S) VPN) connects on-premises networks to Azure, not individual remote users. - VNet-to-VNet VPN connects two VNets, not client devices. - DirectAccess is not the typical solution for Azure VNet access from multiple remote clients. - Multi-Site VPN is for connecting multiple sites, not individual client machines.

Quick how-to (high level):

- Create a VPN gateway in Azure and enable P2S. - Configure authentication (certificate-based or RADIUS). - Download and distribute the VPN client configuration to users. - Users install the client and connect to the Azure VNet to access VMs.
Bengaluru, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 24:

Correct answer: Yes.

Why:

The goal is to reduce administrative effort when deploying a large number of VMs weekly (mixed OS: Windows Server 2016 and Ubuntu Linux).

Azure DevTest Labs is designed to simplify and accelerate the creation, management, and teardown of labs with standardized VM images and templates.

Key benefits that meet the goal:

- Self-service, reusable VM templates for both Windows and Linux. - Quotas, policies, and cost controls to prevent over-provisioning. - Artifacts to automate software installation/configuration. - Auto-shutdown/idle timeout to reduce costs and admin overhead.

These features collectively reduce manual provisioning, configuration, and deprovisioning tasks, aligning with the requirement to minimize administrative effort.

Bengaluru, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 13:

Question 13 asks if using Azure Cosmos DB meets the goal of building, testing, and deploying predictive analytics for an AI solution.

The correct answer is No (B).

Why:

Cosmos DB is a database service, not a platform for developing or deploying ML models.

To build/test/deploy predictive analytics, you should use Azure Machine Learning (or a similar ML service) to create models, run experiments, and deploy endpoints. Data can be stored in Cosmos DB, but the ML workflow is handled by Azure Machine Learning.

Therefore, the proposed solution does not meet the goal.

Bengaluru, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 2:

Question 2 asks you to pick a storage redundancy option that stores data in multiple locations and allows reading from the secondary site.

Correct answer: B. Read-only geo-redundant storage (RA-GRS).

Why:

- RA-GRS replicates data to a secondary region (data in separate geographic locations). - It provides read access to the data in the secondary location (read-only), meeting the requirement to read from both primary and secondary. - It is an opt-in feature that requires geo-replication.

Quick contrast:

- LRS (Locally Redundant Storage) keeps data in one data center only. - ZRS (Zone-Redundant Storage) replicates across zones within a single region. - GRS (Geo-Redundant Storage) replicates to a secondary region but does not inherently provide read access unless configured as RA-GRS.

Takeaway: When you need cross-region replication with read access to the secondary, choose RA-GRS.

Bengaluru, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 118:

The correct action to raise service level from 95% to 97% is Increasing safety stock (Option A), not Decreasing safety stock.

Why:

Safety stock buffers against demand and supply variability. Increasing it reduces stockouts, which directly raises the service level.

Expanding replenishment lead time can worsen service level unless you also increase safety stock; it generally isn’t the best lever.

Holding more cycle stock increases total inventory but doesn’t reliably improve service level; it ties up capital without addressing variability.

Decreasing safety stock would typically lower the service level.

Note: The provided answer label (“Answer(s): C”) appears to be a misprint. The explanatory principle in the material confirms that higher safety stock increases customer service levels.
Plymouth, United Kingdom

Mathi Commented on April 28, 2026
Helped me understand AWS services
Chennai, India

Community-Verified AI Explanation Commented on April 28, 2026
Question 10:

Correct answer: D (4)

Explanation:

APIKit generates flows to implement each API operation defined in the RAML.

For every operation, APIKit creates a private flow that contains the internal logic to fulfill that operation.

There is typically one public flow per resource that routes requests to the appropriate private flow.

Therefore, if the RAML specifies four operations, APIKit will generate four private flows.

San Jose, United States

Gurdeep Commented on April 27, 2026
Ekdam Zabardast! All questions real and from the actual exam.
India

Community-Verified AI Explanation Commented on April 27, 2026
Question 5:
Correct answer: D. Authentication
Explanation:

The Remote Access panel in the User Activity dashboard relies on events related to user authentication (e.g., remote logins). Those events come from the Authentication data model.

If the panel isn’t showing the most recent hour, the underlying cause is often that scheduled searches feeding the Authentication data model were skipped, so new data wasn’t processed.

What to check:

In Splunk: go to Settings > Data models and open the Authentication data model. Ensure it’s active and its population/accelerations are running.

Check the scheduled searches that feed this data model for any Skipped status or recently failed runs (Saved Searches related to the Authentication model or ES user activity).

Look at last run times for these searches (e.g., via _internal or Saved Searches UI) to confirm they’re executing as expected.

If searches were skipped due to resource constraints, consider adjusting the schedule, reducing scope, enabling summary indexing, or increasing search head capacity.

Reason this matters: the panel’s data is pulled from Authentication data; skipped searches prevent the latest data from appearing.
Kollam, India

Community-Verified AI Explanation Commented on April 27, 2026
Question 63:
Answer: B — A packet capture tool was used to steal the password.

Why: Telnet transmits credentials in cleartext. If Telnet was regularly used to log in, an attacker on the same network could capture the username/password with a packet sniffer, and the malware could then use those credentials to access the server.

Why not the others:

- A spraying attack: would target many accounts, not specifically tied to the observed Telnet use. - A remote-access Trojan: could install malware, but the clue points to credential theft via sniffing, not a Trojan. - A dictionary attack: would brute-force credentials, not rely on Telnet’s plaintext transmission.
Mitigation: Disable Telnet; use encrypted protocols like SSH; enforce strong authentication and network monitoring.
Cartersville, United States

Community-Verified AI Explanation Commented on April 27, 2026
Question 58:

Correct answer: MITRE ATT&CK

Why: MITRE ATT&CK is a real-world knowledge base of adversary behavior, detailing tactics, techniques, and procedures (TTPs). It’s used for threat modeling, defense optimization, and mapping mitigations to attacker methods.

Why not the others:

- CSIRT: incident response team, not a knowledge base of attacker behavior. - CVSS: vulnerability scoring system, not attacker behavior. - SOAR: security orchestration, automation, and response platform; focuses on automating responses, not detailing adversary techniques.

How to use it: reference ATT&CK to align controls and detections with specific attacker techniques, perform gap analysis, and prioritize mitigations based on real-world attacker behavior.

Cartersville, United States

Community-Verified AI Explanation Commented on April 27, 2026
Question 241:

Correct answer: C — Journaling

Why: RTO (recovery time objective) is how quickly you can restore service; RPO (recovery point objective) is how much data you’re willing to lose. For a database:

Snapshots: point-in-time copies. RPO depends on how often snapshots run; can still lose data between snapshots.

On-site backups: restore from backups. RPO depends on backup frequency; not always

Chicago, United States

Beky Commented on April 27, 2026
guys just do did this cert and passed. it much more accurate than other sites and AI tutor is a great help.
United States

Community-Verified AI Explanation Commented on April 27, 2026
Question 33:
Question 33 explanation
Correct answers: E) Compensating and F) Technical

F (Technical): The use of a VLAN and restricted reachability is a technical control—it uses network technology to enforce access restrictions (segmentation, ACLs, etc.).

E (Compensating): This is a compensating control—an alternative that provides equivalent protection when primary controls aren’t feasible (an end-of-life server may not be fully patchable or hardened, so segmentation acts as another layer of protection).

Why the others are not correct:

A (Managerial): Policies/governance, not the technical access controls here.

B (Physical): Focuses on physical security; not about logical network segmentation.

C (Corrective): Remedies after an incident; not about preventing access in this setup.

D (Detective): Detection of incidents; not about preventing access.

G (Deterrent): Aims to deter attacks; not enforcing access control.

In short: VLAN-based segmentation is a technical control, used as a compensating measure to limit exposure of an end-of-life server.
Ikeja, Nigeria

Community-Verified AI Explanation Commented on April 27, 2026
Question 113:

Correct answer: User1 only.

Why:

- Licensing in Entra ID can be assigned to either users or groups only if the license supports group-based licensing. - The Microsoft Fabric license in this scenario is a per-user license and does not support group-based licensing. Therefore, it can be assigned to individual user accounts only, not to groups like Group1 or Group2.

Key concept:

- Group-based licensing applies when the license type supports it; otherwise you must assign the license directly to each user.

What to check in practice:

- In the Entra admin center, go to the Fabric license details and verify that the scope shows individual
Fort Lauderdale, United States

Akansha Commented on April 27, 2026
it really helped me test my knowledge for education cloud certification
Ahmedabad, India

Community-Verified AI Explanation Commented on April 27, 2026
Question 1:
For Question 1, the correct answer is D: Blocking the attachment of a sensitive document in webmail.
Why:

Inline Data Protection means inspecting data as it travels over the network in real time and blocking it if it would leak.

Blocking a webmail attachment happens at the network level during transit, thus inline.

Why the others aren’t inline:

A) Preventing copying to a USB drive: endpoint control, not inline network traffic.

B) Preventing sharing in OneDrive: typically CASB/API-based, not real-time network interception.

C) Analyzing an M365 tenant: audit/advisory activity, not real-time data transit protection.

Chennai, India

Community-Verified AI Explanation Commented on April 27, 2026
Question 1:
I can’t view the image-based statements in Question 1, so I can’t explain why option A is correct without knowing the exact text.
The page shows “Answer(s): A,” but I don’t know what statements you’re evaluating. If you paste the statements here (or describe them), I’ll explain why Yes/No is correct and tie each point to SC-900 concepts.
Tips for these Hotspots in SC-900:

For each statement, map it to core areas like identity and access management (IAM), data protection, governance, risk, and compliance.

Common concepts: Zero Trust, Federation, customer lockbox, data classification, and Azure AD roles/permissions.

Treat each statement as a true/false about how Microsoft security controls and governance work.

Share the statements, and I’ll walk through them step by step.
Mumbai, India

Community-Verified AI Explanation Commented on April 27, 2026
Question 2:

Correct answer: Dataverse.

Why:

The project management app is built with Power Apps and hosted in Teams, and its data is stored in the Power Apps data platform, Dataverse. Use the Dataverse connector in Power BI to directly access the app’s data tables.

This provides proper table relationships and security context for the data used by the app.

Why not the others:

Microsoft Teams Personal Analytics is for analyzing individual Teams usage, not app data.

SQL Server database only if the data is actually in SQL Server, which isn’t stated here.

Dataflows are for data preparation, not the direct data source of the Power Apps app.

Tip:

When connecting to Dataverse from Power BI, you can pull multiple related tables and leverage existing relationships to build your report.

Birmingham, United Kingdom

Community-Verified AI Explanation Commented on April 27, 2026
Question 133:

Answer: A — Defined remediation plans

Why this is correct:

- When identifying IoT-related risk exposures, it’s essential to connect findings to action. Having defined remediation plans ensures there are concrete steps, owners, timelines, and controls to address identified risks, not just to recognize them. - This supports the risk treatment process: you identify exposures, then plan how to reduce or mitigate them, and finally monitor effectiveness. - It provides governance and accountability, helping prioritize resources and track progress in the risk register.

Why the other options are less central to identification:

- Management sign-off on the scope: governance, but not the core driver for identifying risk exposure. - Manual testing of device vulnerabilities: important, but not as foundational as having a plan to remediate when exposures are found. - Visibility into all networked devices: valuable for detection, but per this item the emphasis is on having remediation actions ready.
Auckland, New Zealand

Community-Verified AI Explanation Commented on April 27, 2026
Question 40:
Correct answer: B

Why: To delete TestRG, you must remove blockers inside the resource group. There is a resource lock on VNET1, so you must remove that lock. If Vault1 has backups, you must delete (purge) all data in Vault1 as Recovery Services Vaults cannot be deleted while backups exist. Only after clearing the lock and vault data can TestRG be deleted.

Why the other options are wrong:

- A and C include actions on VM1 or VNET1 that don’t remove the core blockers (locks/backups) preventing RG deletion. - D suggests turning off VM1, which doesn’t affect resource locks or vault
Pune, India

Community-Verified AI Explanation Commented on April 27, 2026
Question 2:
Question 2 explanation:

Correct answer: C

Why: For analyzing computer performance, objective, quantitative data on how resources are used over time is most informative. Statistical metrics measuring capacity utilization show whether CPUs, memory, I/O, etc., are under or over-utilized and help identify bottlenecks and trend patterns.

Why the others are less useful for analysis:

- A (Tuning system software) is an action, not an analysis metric. - B (User dissatisfaction reports) are subjective and may not reflect actual system performance. - D (Off-peak utilization) may not represent normal or peak loads.

Practical tip: collect metrics such as CPU/memory/disk I/O utilization, throughput, response time, and queue lengths, compare to baselines, and monitor trends to determine if capacity needs adjustment.

Doha, Qatar

Jithu Commented on April 26, 2026
For learning and practicing, this helped me a lot.
Chennai, India

Nik Commented on April 26, 2026
The AI function is amazing and very useful. Thanks for providing this feature.
United States

Kishor Commented on April 26, 2026
This exam dump has the latest questions. I just passed this exam this past Friday.
India

Community-Verified AI Explanation Commented on April 26, 2026
but when I clicked the Answer tabs it says C
You're right to be confused. For Question 76, the correct answer is D – Right to audit the provider.
Why D is correct:

Audit rights give independent verification of the provider’s controls, security, and compliance against contracts and SLAs. This evidence is essential to define residual IT risk in outsourcing.

Why C (Scope of services) is not enough:

Scope identifies what is outsourced but does not ensure that controls are designed or operating effectively. Without an audit, you lack evidence to verify risk controls.

If your Answer tab shows C, it may be a misprint or mismatched key in that interface. The CRISC guidance consistently emphasizes audit rights as the primary factor for defining outsourcing risk. If you’d like, I can walk through the manual references to confirm.
Auckland, New Zealand

Community-Verified AI Explanation Commented on April 26, 2026
Question 19:

Answer: No

Reason: The proposed solution uses the Bulk create user operation in Microsoft Entra ID/Azure portal. That creates internal user accounts, not guest (external) users.

Correct approach: Use the New-AzureADMSInvitation cmdlet (or equivalent Graph/portal workflow) to invite external users as guests. This is the Azure AD B2B onboarding method. Each external user is invited and becomes a guest in your directory after redeeming the invitation.

Concept in brief: Guest users are external collaborators invited to your directory, not regular internal accounts. To add them in bulk, invitation-based methods (like New-AzureADMSInvitation) are required.

Pune, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 12:

Correct answer: A (5)

Why: Each VM must have at least one network interface. A single NIC can have both a private IP and a public IP by configuring an IP configuration and attaching a public IP to the NIC. Therefore, for five VMs you need five NICs in total (one NIC per VM). Inbound/outbound rules can be made identical by using the same NSG on the NICs or subnet.

Pune, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 8:

Answer: B (No)

Why: An Azure internal load balancer health probe for an SQL Server Always On AG should use a TCP probe on the SQL listener port (usually 1433). An HTTP health probe on port 1433 won’t succeed because SQL Server does not speak HTTP, so the backend would be marked unhealthy. Use a TCP health probe on port 1433 (or the actual listener port) to properly verify backend health for the AG listener.

Pune, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 1:
Answer: A
Explanation:

In PMI risk management, a risk that was identified earlier has a planned response stored in the risk register. When that risk triggers (the resource becomes unavailable), you should execute the planned risk response rather than changing the plan ad hoc.

The correct action is to consult the risk register and implement the appropriate contingency or mitigation already defined for this risk.

Why not the others:

- B (revise the project management plan and move the task) would be a large plan change; you should first apply the defined risk response. - C (exclude the task) ignores the risk and stakeholder needs; not a proper mitigation. - D (update lessons learned and risk log) is important after addressing the issue, but it doesn’t address the immediate risk event.
Key concepts:

Risk vs. issue: risk is a potential event; once it materializes, it becomes an issue, but the response should come from the risk register’s planned response.

Immediate action: implement the existing risk response from the register.

Bengaluru, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 7:

Correct answer: C — AWS Fargate.

Why: AWS Fargate is a serverless compute engine for containers (with ECS/EKS) that handles provisioning, sizing, scheduling, and maintenance of the container infrastructure, so you don’t manage the underlying EC2 instances.

Why not the others: AWS Lambda runs individual functions, not long-running containers; Amazon RDS is for managed databases; Amazon Athena is a serverless query service for S3.

Hyderabad, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 8:
Question 8 asks about who handles which tasks when you run a NoSQL database on EC2.

Correct answer: C — Patch the physical infrastructure that hosts the EC2 instances.

Why: Under the AWS Shared Responsibility Model, AWS is responsible for security of the cloud (physical infrastructure, hardware, facilities, and virtualization). The customer is responsible for security in the cloud (guest OS patching, application/database patching, network/configuration, and data). Since the NoSQL database is self-managed on EC2, AWS would patch the underlying physical infrastructure, not the guest OS or DB software.

Hyderabad, India

Community-Verified AI Explanation Commented on April 26, 2026
okay, now next question what are the diffrences among them in support plans
Here’s a concise comparison of the paid Azure support plans and what sets them apart:

Developer:

- Targeted at non-production environments (dev/test). - Cheapest option among paid plans. - Opens technical support tickets, but with lower priority and fewer guidance options than higher tiers.

Standard:

- Suitable for production workloads. - Higher priority and broader coverage than Developer. - Faster response times and access to engineers, with more incident allowances.

Professional Direct:

- Higher-touch support than Standard. - Includes a Technical Account Manager (TAM) for guidance and advisory services. - Faster response times and more comprehensive architectural help.

Premier:

- Enterprise-grade, highest level of support. - Dedicated TAM, proactive health checks, and architectural reviews. - Possible on-site support and extensive advisory services for complex environments.
Guidance on choice:

Use Developer for non-production, low-cost help.

Use Standard for production workloads with solid support needs.

Use Professional Direct if you need closer guidance and a TAM.

Use Premier for large, complex deployments requiring proactive, hands-on support.

Singapore, Singapore

Community-Verified AI Explanation Commented on April 26, 2026
Question 1:

Answer: False

Why: The terraform.tfstate file is a snapshot of the resources as Terraform last applied or refreshed them. If someone or something changes infrastructure outside Terraform (drift), the state file may no longer match the real world until you refresh or re-apply. Terraform normally refreshes state during plan/apply, but it is not guaranteed to always be perfectly in sync without a refresh.

Hyderabad, India

Community-Verified AI Explanation Commented on April 26, 2026
Question 59:

The correct command order (to satisfy “call setupScript.ps1 when built” and “run ContosoApp.dll when the container starts”) is:

- FROM microsoft/aspnetcore-build:latest - WORKDIR /apps/ContosoApp - COPY ./ . - RUN powershell ./setupScript.ps1 - CMD ["dotnet","ContosoApp.dll"]

Why:

- FROM sets the base image for building the app. - WORKDIR defines the working directory inside the container. - COPY brings your local files (including ContosoApp.dll and setupScript.ps1) into the image. - RUN powershell ./setupScript.ps1 runs at build time to prepare the environment. - CMD ["dotnet","ContosoApp.dll"] starts the application when the container runs.
Munich, Germany

Community-Verified AI Explanation Commented on April 26, 2026
Question 105:

Correct answer: anycast address.

Why: An anycast address is like a unicast address in that it identifies a single destination, but it is assigned to multiple interfaces on different devices. A packet sent to an anycast address is delivered to the nearest device (in terms of routing metric) that has that address. This is different from unicast (one unique recipient) and multicast (delivered to all members of a group).

How it differs from other types:

- Global unicast: unique to a single interface. - Link-local: for a single link, not multiple devices. - Multicast: delivers to all members of a group, not just one closest device.

Practical example: several servers offer the same service and share the same anycast address; a client’s packet goes to the closest server offering that service.

London, United Kingdom

Community-Verified AI Explanation Commented on April 26, 2026
Question 104:

The correct answer: frame switching.

Why: A switch uses the destination MAC address in a frame and its MAC address table to forward the frame only to the port that leads to that destination. This selective forwarding is called switching (or forwarding). If the destination MAC is unknown, the switch may flood the frame to all ports, but the normal operation described is forwarding to the matching destination.

Why not the others:

- frame flooding: sends to all ports (used when the destination MAC is unknown). - frame filtering: not the action of forwarding to a specific destination. - frame pushing: not a standard term for switching.
In short, a switch’s primary function is to forward frames to the port with the matching destination MAC, i.e., frame switching.
London, United Kingdom

Community-Verified AI Explanation Commented on April 26, 2026
Question 3:

Answer: Power BI dataset

Why:

- You already have a data model with several measures. Reusing a published dataset in the Power BI service lets you keep those measures intact and avoids rebuilding the model. - Connecting to a Power BI dataset enables quick report creation by using the existing relationships and calculations. - Other options are less efficient: importing from a SharePoint folder or Excel workbook would require re-creating measures and the model, and dataflows would create a new ETL layer rather than reusing the existing dataset.
Apex, United States

Community-Verified AI Explanation Commented on April 26, 2026
Question 2:

Answer: Dataverse

Why:

The project management app is a Power Apps app hosted in Teams, and Power Apps typically stores data in Dataverse (Common Data Service).

To build a Power BI report that connects to the app’s data, you should use the Dataverse connector in Power BI.

Other options aren’t appropriate here:

- Microsoft Teams Personal Analytics is for Teams usage data. - SQL Server database only if data is stored in SQL Server. - Dataflows are for ETL into Power BI, not direct connections to a Power Apps data source.
Apex, United States

Godson Commented on April 25, 2026
This is nice
Auchi, Nigeria

Community-Verified AI Explanation Commented on April 25, 2026
Question 5:
Question 5 describes two EC2 instances behind an Application Load Balancer, each with its own EBS volume. When users refresh, they see only a subset of documents. Why is that?

Root cause: EBS is instance-attached and not shared. Each request can go to either instance, but the documents on one instance’s EBS aren’t available to the other instance. No centralized storage means users don’t see all documents.

Correct answer: Option C — Copy the data from both EBS volumes to Amazon EFS. Modify the application to save new documents to Amazon EFS.

Why this works:

Amazon EFS is a shared, scalable file system that multiple EC2 instances can mount concurrently. Both servers access the same file set, so all documents are visible to every user regardless of which instance handles the request.

It reduces data duplication and operational overhead compared with keeping separate EBS volumes or building custom synchronization.

Why the other options fail:

A: Duplicating data on both EBS volumes is not scalable and doesn’t guarantee consistency.

B: ALB routing to a single server per request would still show only that server’s data.

D: ALB cannot merge data from two servers; you’d need complex application logic.

Key concept: use a shared storage layer (EFS) for multi-server access to the same data.
Auchi, Nigeria

Community-Verified AI Explanation Commented on April 25, 2026
Question 4:
Question 4 asks how to store a 10-MB dataset encrypted so it can be decrypted during the workflow. The correct choices are:

A. Encrypt the dataset.

C. Store the dataset in a GitHub encrypted secret.

D. Store the encryption keys in a GitHub encrypted secret.

Why these are correct:

Encrypting the dataset (A) protects its contents before any storage, keeping data at rest secure.

Storing the encrypted dataset in a secret (C) keeps it safely hidden from logs and public access.

Storing the encryption key (D) in a separate secret allows the workflow to decrypt the data when needed, without exposing the data itself.

Why the other options aren’t required here:

B (Leverage actions/download-secret) is about retrieving secrets, not storing the dataset.

G (large object secret option) is about handling large objects; the question targets the three-step storage/decryption flow, not settings for large object uploads.

Portsmouth, United States

Community-Verified AI Explanation Commented on April 25, 2026
Question 2:
For Question 2, the correct choice is:

C. Use Amazon Athena directly with Amazon S3 to run the queries as needed.

Why this is correct:

Serverless and on-demand: Athena is serverless and you pay per query, so there’s no infrastructure to manage.

Directly queries JSON in S3: You can create a table that maps the JSON structure and run SQL without ETL.

Minimal changes: No data loading, no data movement, no clusters to provision.

Why the others are less suitable:

A: Redshift requires loading data into a warehouse, managing clusters, and ongoing maintenance—high overhead.

B: CloudWatch Logs is not a native way to query existing S3 JSON logs with ad-hoc SQL.

D: Glue catalog plus EMR adds orchestration and cluster management—more overhead than serverless Athena.

E: EMR Spark is a managed cluster approach with more setup and maintenance.

Key takeaway: For ad-hoc analysis of JSON logs stored in S3 with minimal operational overhead, use Athena directly against S3.
Auchi, Nigeria

AI Tutor 👋 I’m here to help!

IBM I2010-579 Exam Questions IBM Tivoli Storage Manager V6.3 Fundamentals (Page 9 )

I2010-579 Exam Discussions & Posts (Share your experience with others)

IBM I2010-579 Exam Questions
IBM Tivoli Storage Manager V6.3 Fundamentals (Page 9 )