Red Hat Certified OpenShift Administrator Free Sample Questions

12 free sample questions180 in the full practice test

Try simulator

EX280 Sample Questions

  1. Question 1

    Intermediate

    Configure network security · Secure external and internal traffic using TLS certificates

    You are the OpenShift Administrator for a financial institution. A development team needs to expose a secure internal banking API to external partners. The application handles sensitive data that must be encrypted from the client all the way to the pod. The TLS termination must not occur at the router level; the router should simply forward the encrypted traffic to the destination pod which holds the private key. Which Route configuration strategy should you implement?

    Answer and explanation

    Correct answer: B

    Passthrough termination sends encrypted traffic directly to the destination pod without the router decrypting it. This is required when the pod owns the private key and end-to-end encryption is mandatory without an intermediate decryption point.

    graph LR Client((Client)) -->|Encrypted HTTPS| Router[OpenShift Router] Router -->|Encrypted HTTPS| Pod[Application Pod] style Router fill:#f9f,stroke:#333,stroke-width:2px style Pod fill:#bfb,stroke:#333,stroke-width:2px
  2. Question 2

    Beginner

    Enable developer self-service · Configure project quotas

    A developer reports that their application deployment in the 'frontend' project is failing to create new pods. Upon investigation, you see the message 'Forbidden: exceeded quota: compute-resources, requested: requests.cpu=200m, used: requests.cpu=1800m, limited: requests.cpu=2'. What is the most immediate cause of this issue?

    Answer and explanation

    Correct answer: D

    The error message explicitly states 'exceeded quota', indicating that a ResourceQuota object exists in the namespace ('frontend') and the cumulative CPU requests (1800m used + 200m requested = 2000m or 2 cores) has hit the hard limit defined in that quota.

  3. Question 3

    Intermediate

    Manage authentication and authorization · Configure the HTPasswd identity provider for authentication

    You are configuring an HTPasswd identity provider for an OpenShift 4 cluster. You have already created the 'htpasswd' file with the user credentials. Which of the following sequences correctly describes the next steps to activate this authentication mechanism?

    Answer and explanation

    Correct answer: B

    In OpenShift 4, configuration is declarative. You must first create a Secret in the 'openshift-config' namespace containing the htpasswd file. Then, you modify the global OAuth configuration (oc edit oauth cluster) to add an identity provider of type HTPasswd referencing that secret.

  4. Question 4

    Advanced

    Declarative Resource Management · Work with Kustomize overlays

    Your organization requires a specific set of Kustomize overlays for deploying an application to Development, Stage, and Production environments. You have a 'base' directory containing the common deployment.yaml and service.yaml. You need to ensure the Production overlay scales the replicas to 5 and changes the image tag to 'stable'.

    Which file structure and content is correct for the production overlay?

    Answer and explanation

    Correct answer: D

    The standard Kustomize overlay pattern involves a kustomization.yaml file in the overlay directory (e.g., /overlays/production). It must reference the base resources using the 'resources' field and apply environment-specific changes using 'patches' (or 'patchesStrategicMerge').

    graph TD Base[Base Directory] -->|Contains| Dep[deployment.yaml] Base -->|Contains| Svc[service.yaml] Overlay[Overlay: Production] -->|References| Base Overlay -->|Applies| Patch[Replica & Image Patch] Patch -.->|Modifies| Dep
  5. Question 5

    Beginner

    Manage authentication and authorization · Modify user and group permissions

    You need to grant a specific user, 'alice', the ability to view all resources in the 'marketing' project, but she should not be able to modify any resources. Which command achieves this using the default ClusterRoles?

    Answer and explanation

    Correct answer: D

    The command 'oc adm policy add-role-to-user' creates a RoleBinding within the specified namespace ('-n marketing'). The 'view' ClusterRole provides read-only access to most resources, which meets the requirement. Using 'add-cluster-role-to-user' would grant her view access to the entire cluster, which violates the principle of least privilege.

  6. Question 6

    Intermediate

    Enable developer self-service · Configure cluster resource quotas

    A database pod in the 'db-prod' project keeps restarting with an 'OOMKilled' error. You determine that the application needs more memory than the current limit allows. The project has a ResourceQuota 'quota-prod' with 'limits.memory: 10Gi' and 'used: 9.5Gi'. The pod requests 1Gi. What must you do to successfully deploy the fix?

    Answer and explanation

    Correct answer: C

    The project is currently using 9.5Gi out of a 10Gi limit. Increasing the pod's memory requirement (which is already 1Gi) would push the total usage beyond the 10Gi quota. Therefore, you must first expand the ResourceQuota to accommodate the new requirement before the pod can be successfully scheduled with higher limits.

Register free for 6 more questions

Or unlock all 180 EX280 questions with explanations, timed mode and flashcards.