I B M C E R T I F I C A T I O N
C9005800 IBM Certified Professional Architect – Cloud v6 Practice Exam
Exam Number: 4354 | Last updated April 17, 2026 | 388+ questions across 5 vendor-aligned objectives
Cloud-native architects who design production workloads on IBM Cloud v6 target the C9005800 credential. This professional-level exam validates your ability to pick the right services, compose them into reference architectures, and defend those choices against security, cost, and operability reviews. Candidates should be comfortable across compute tiers, managed services, network topologies, and the IAM fabric that ties them together.
Fetching 26% of the exam, Solution Architecture covers landing zones, reference patterns, and the Well-Architected Framework for IBM Cloud. At 22%, Compute and Application Platform covers Code Engine, VPC compute, OpenShift on IBM Cloud, and Classic infrastructure. A further 20% targets Data and Storage, covering block storage, object storage, Db2 on Cloud, and Cloudant.
Fringing the final sections, Network and Security accounts for 18% and spans VPC design, Transit Gateway, Security and Compliance Center, and IAM. Observability and Operations represents 14% and spans Log Analysis, Activity Tracker, and Monitoring. Architect-level questions often place two valid designs against each other — choose based on which quality attribute the scenario emphasizes rather than which pattern you prefer personally.
Every answer links to the source. Each explanation below includes a hyperlink to the exact IBM documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →
766
practice exam users
94%
satisfied users
91%
passed the exam
4.7/5
quality rating
Test your C9005800 architect cloud v6 knowledge
10 of 388+ questions
Question #1 - Solution Architecture
A v6 architect at Northridge Holdings must stand up an enterprise landing zone for 30 application teams on IBM Cloud v6.
Which IBM Cloud landing-zone pattern matches the v6 reference?
A) Each team directly on the public internet
B) One flat account shared by every team
C) Separate enterprises per team with no shared identity
D) A hub-and-spoke enterprise account model with a shared-services hub, per-team spoke accounts, Transit Gateway, central IAM, and context-based restrictions
Show solution
Correct answers: D – Explanation:
Hub-and-spoke with shared services and central IAM is the IBM Cloud v6 landing-zone reference. Flat accounts, disjoint enterprises, and direct internet exposure all fail the pattern. Source: Check Source
Question #2 - Solution Architecture
A v6 reference-pattern review at Ashfield Bank compares monolith-lift-and-shift against a refactor for a customer-facing application.
Which IBM Cloud v6 Well-Architected reasoning fits?
A) Always lift-and-shift because it’s fast
B) Pick the pattern based on the pillars that matter most in the scenario — lift-and-shift for speed and lower initial cost, refactor when reliability, scalability, or operability payoff justifies the investment
C) Always refactor because it’s modern
D) Let personal preference decide
Show solution
Correct answers: B – Explanation:
Pillar-driven pattern selection is the Well-Architected reference. Reflexive choices and preference-based decisions all miss the framework. Source: Check Source
Question #3 - Solution Architecture
A v6 architect at Marshcreek Insurance must enforce that a particular managed service is reachable only from the corporate network and approved VPCs.
Which IBM Cloud v6 control best enforces that constraint?
A) An app-layer password check alone
B) A runbook note telling admins to access only from the office
C) Context-based restrictions on the service permitting only the specified network zones, combined with private-only endpoints
D) Deploying the service in a different region from the VPCs
Show solution
Correct answers: C – Explanation:
CBR plus private endpoints is the IBM Cloud v6 network-origin control reference. Runbook notes, app-layer passwords, and regional separation all fail platform-layer enforcement. Source: Check Source
Question #4 - Compute and Application Platform
A v6 workload at Clearspring Analytics runs briefly per event and idles most of the time.
Which IBM Cloud compute platform matches the spiky pattern?
A) IBM Cloud Code Engine running the workload as an event-driven container that scales to zero between invocations
B) A permanently running VSI paid 24/7
C) A dedicated bare-metal server
D) An always-on OpenShift Deployment scaled manually
Show solution
Correct answers: A – Explanation:
Code Engine scales to zero and suits event-driven spiky workloads — IBM Cloud v6’s canonical fit. Permanent VSIs, bare metal, and always-on Deployments all pay for idle. Source: Check Source
Question #5 - Compute and Application Platform
A v6 application platform at Orchardvale Holdings runs many microservices with complex routing and RBAC needs.
Which compute platform matches the requirement?
A) A single VSI with every microservice packed in
B) Red Hat OpenShift on IBM Cloud with operator-managed platform services, RBAC, and built-in routing to support multi-microservice workloads at scale
C) Code Engine alone for a complex service mesh
D) Classic infrastructure with no orchestrator
Show solution
Correct answers: B – Explanation:
Red Hat OpenShift on IBM Cloud is the v6 reference for complex microservice platforms. Single VSIs, Code-Engine-only, and Classic infrastructure miss the use case. Source: Check Source
Question #6 - Data and Storage
A v6 architect at Fernmouth Financial must store 50 TB of infrequently accessed compliance documents cost-effectively with long retention.
Which IBM Cloud storage option fits?
A) IBM Cloud Block Storage tuned for high IOPS
B) IBM Cloud Object Storage with a storage class matched to access pattern (e.g., Cold or Smart Tier), with bucket-level lifecycle and retention policies
C) VSI-local disks replicated manually
D) Shared NFS mounted across every service
Show solution
Correct answers: B – Explanation:
IBM Cloud Object Storage with lifecycle/retention is the v6 reference for cold/archive document storage. Block, VSI-local, and shared NFS all miss the pattern. Source: Check Source
Question #7 - Data and Storage
A v6 workload at Sandmoor Retail needs a managed NoSQL database with flexible schema and global replication.
Which IBM Cloud option fits?
A) IBM Cloudant — a managed NoSQL database with replication that fits schemaless document workloads
B) IBM Cloud Block Storage, which is a storage service rather than a database
C) Self-hosted MongoDB on a VSI with manual HA
D) Paper-based filing
Show solution
Correct answers: A – Explanation:
Cloudant is IBM Cloud’s managed NoSQL reference. Block storage, self-hosted, and paper filing all miss the requirement. Source: Check Source
Question #8 - Network and Security
A v6 VPC design at Redwell Insurance must protect a database tier from public-internet reachability while allowing controlled app-tier access.
Which IBM Cloud v6 network design fits?
A) Put the database on the same subnet as public-facing endpoints
B) Attach a public IP to the database and filter at the app layer only
C) Place the database in a private subnet, expose it via a private endpoint, and use security groups and network ACLs to allow only the app-tier subnet
D) Allow inbound internet traffic globally and hope attackers skip it
Show solution
Correct answers: C – Explanation:
Private subnet plus private endpoint plus SG/ACL is the IBM Cloud v6 network reference. Public IPs, mixed subnets, and global inbound access all fail security. Source: Check Source
Question #9 - Network and Security
A v6 architect at Boxmere Trust must continuously assess the deployment against IBM Cloud best-practice controls.
Which v6 capability fits?
A) A developer’s personal notes
B) A one-time manual audit at go-live only
C) Quarterly emailed checklists
D) IBM Cloud Security and Compliance Center with an appropriate profile enabled for continuous posture assessment and drift alerts
Show solution
Correct answers: D – Explanation:
SCC with a profile and continuous assessment is the v6 reference. Point-in-time audits, emails, and notes all fail continuous posture. Source: Check Source
Question #10 - Observability and Operations
A v6 architect at Tarnstone Logistics needs a single platform-event audit log for IBM Cloud management-plane actions.
Which IBM Cloud service fits?
A) IBM Cloud Activity Tracker, which captures management-plane events with actor, timestamp, and action — with retention archiving as required
B) Application logs alone
C) Monitoring dashboards alone
D) Memory of on-call engineers
Show solution
Correct answers: A – Explanation:
Activity Tracker is the IBM Cloud v6 management-plane audit reference. App logs, dashboards, and memory all fail the audit need. Source: Check Source
Get 388+ more questions with source-linked explanations
Every answer traces to the exact IBM documentation page — so you learn from the source, not just memorize answers.
Exam mode & learn mode · Score by objective · Updated April 17, 2026
Learn more...
What the C9005800 architect cloud v6 exam measures
- Architect and compose landing zones, reference patterns, and Well-Architected trade-offs to build IBM Cloud designs that pass architecture-review scrutiny and scale with the business
- Select and size Code Engine, VPC compute, OpenShift on IBM Cloud, and Classic options to match workloads to the right compute tier without over-paying or over-operating
- Store and query block storage, object storage, Db2 on Cloud, and Cloudant to pick durable, performant data stores that match access patterns and cost constraints
- Segment and secure VPC design, Transit Gateway, Security and Compliance Center, and IAM to establish network and identity boundaries that survive real attacker pressure
- Observe and operate Log Analysis, Activity Tracker, and Monitoring to give both engineering and audit teams the visibility they need post-deployment
How to prepare for this exam
- Review the official exam guide to understand every objective and domain weight before you begin studying
- Work through the relevant IBM Training learning path — ibm certified professional architect cloud v6 C9005800 — to cover vendor-authored material end-to-end
- Get hands-on inside IBM TechZone or a comparable sandbox so you can practice the console tasks, CLI commands, and APIs the exam expects
- Tackle a real-world project at your workplace, a volunteer role, or an open-source repository where the technology under test is actually in use
- Drill one exam objective at a time, starting with the highest-weighted domain and only moving on once you can teach it to someone else
- Study by objective in PowerKram learn mode, where every explanation links back to authoritative IBM documentation
- Switch to PowerKram exam mode to rehearse under timed conditions and confirm you consistently score above the pass mark
Career paths and salary outlook
Professional cloud architects see rapid upward trajectory toward principal and staff roles in large enterprises:
- Professional Cloud Architect — $135,000–$185,000 per year, designing production workloads on IBM Cloud (Glassdoor salary data)
- Senior Solutions Architect — $145,000–$195,000 per year, leading cloud migration and modernization programs (Indeed salary data)
- Cloud Consulting Architect — $140,000–$190,000 per year, advising enterprises on IBM Cloud adoption (Glassdoor salary data)
Official resources
Work through the official IBM Training learning path for this certification, which bundles videos, labs, and skill tasks aligned to every objective. The official exam page lists the full objective breakdown, prerequisite knowledge, and scheduling details.