Changing the Concept of EX280 Exam Preparation 2026
Getting EX280 Certification Made Easy! Get professional help from our EX280 Dumps PDF
NEW QUESTION # 10
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project bullwinkle
$ oc get pods
$ oc get all | grep deploy
$ oc get nodes
$ oc describe nodes | grep -i taint
$ oc adm taint nodes worker0 key1=value1:NoSchedule-
$ oc adm taint nodes worker1 key1=value1:NoSchedule-
$ oc describe nodes | grep -i taint
$ oc get route
$ oc delete route rocky
$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com
$ oc get route
NEW QUESTION # 11
Deploy Application in the Project QED
Task information Details:
Set the service account for the specified deployment in project qed to project1-sa .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Ensure you are in the correct project:
oc project qed
* Set the service account on the deployment:
oc set serviceaccount deployment/gitlab-skdjfklj project1-sa
* Verify:
oc get deployment gitlab-skdjfklj -o yaml | grep serviceAccount
oc describe deployment gitlab-skdjfklj
* If required, restart rollout:
oc rollout restart deployment/gitlab-skdjfklj
This task checks workload identity assignment through service accounts.
NEW QUESTION # 12
Configure quotas
Configure your OpenShift cluster to use quotas in the manhattan project with the following requirements:
The name of the ResourceQuota resource is: ex280-quota
The amount of memory consumed across all containers may not exceed 1Gi
The total amount of CPU usage consumed across all containers may not exceed
2 full cores
The maximum number of replication controllers does not exceed 3 The maximum number of pods does not exceed 3 The maximum number of services does not exceed 6
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project manhattan
$ oc create quota ex280-quota -- hard=memory=1Gi,cpu=2,pods=3,services=6,replicationcontrollers=3
$ oc get resourcequota
NEW QUESTION # 13
Use Secret in Monday Project
Task information Details:
Use the secret created earlier as environment variables in deployment monday .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the correct project if needed:
oc project monday
* Inject environment variables from the secret:
oc set env deployment/monday --from=secret/magic
* Verify:
oc set env deployment/monday --list
oc describe deployment monday
Notes:
* The uploaded lab references secret/file-secret, but Task 8 clearly intends the secret to be named magic .
* In a real exam, match the actual secret name present in the cluster.
This task tests secret consumption by workloads through environment variable injection.
NEW QUESTION # 14
Create Secure Route in Quart Project
Task information Details:
Create an edge route named htquart for service httpd , using the specified hostname and TLS certificate/key files.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the quart project:
oc project quart
* Create the secure route:
oc create route edge htquart \
--service=httpd \
--hostname=quart.apps.ocp4.example.com \
--cert=./req.crt \
--key=./req.key
* Verify:
oc get route htquart
oc describe route htquart
* Test resolution and access if DNS is available:
curl -k https://quart.apps.ocp4.example.com
This task checks route exposure, TLS termination, and secure ingress administration.
NEW QUESTION # 15
Create LimitRanges for Project Darpa
Task information Details:
Switch to project darpa and create a LimitRange with Pod and Container minimums and maximums of CPU and memory, plus default container values.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the target project:
oc project darpa
* Create a YAML file, for example limitrange.yaml:
apiVersion: v1
kind: LimitRange
metadata:
name: darpa-limits
namespace: darpa
spec:
limits:
- type: Pod
max:
cpu: 300m
memory: 300Mi
min:
cpu: 5m
memory: 5Mi
- type: Container
max:
cpu: 300m
memory: 300Mi
min:
cpu: 5m
memory: 5Mi
default:
cpu: 100m
memory: 100Mi
* Apply it:
oc apply -f limitrange.yaml
* Verify:
oc get limitrange -n darpa
oc describe limitrange darpa-limits -n darpa
This task validates namespace-level defaulting and constraint policies for pod scheduling and resource consumption.
NEW QUESTION # 16
Scale Application Manually
Task information Details:
Scale the httpd deployment to 5 replicas .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Scale the deployment:
oc scale deployment httpd --replicas=5
* Verify:
oc get deployment httpd
oc get pods -l app=httpd
* Confirm the desired, current, and available replica counts match.
This task checks direct workload scaling using the OpenShift CLI.
NEW QUESTION # 17
Configure an application to use a secret
Configure the application called qed in the math project with the following requirements:
The application uses the secret previously created called: magic The secret defines an environment variable with name: DECODER_RING The application output no longer displays: Sorry, application is not configured correctly.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc get all | grep deploy
$ oc set env --from=secret/magic deployment.apps/qed
NEW QUESTION # 18
Create a CronJob test-cron
Task information Details:
Create service account jupiter .
Grant anyuid SCC and cluster- admin to it.
Update CronJob cron-test to use that service account.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the project hosting the cronjob, if needed:
oc project cron-test
* Create the service account:
oc create sa jupiter
* Grant anyuid:
oc adm policy add-scc-to-user anyuid -z jupiter -n cron-test
* Grant cluster-admin:
oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:cron-test:jupiter
* Update the cronjob:
oc patch cronjob cron-test -p '{"spec":{"jobTemplate":{"spec":{"template":{"spec":{"serviceAccountName":" jupiter"}}}}}}'
* Verify:
oc get cronjob cron-test -o yaml | grep serviceAccountName
Notes:
* The uploaded lab uses oc set sa cronjob.batch/cron-test jupiter, which is not the usual command form for CronJobs. Patching the pod template is the reliable method.
This task checks service account and privilege adjustments for scheduled workloads.
NEW QUESTION # 19
Managing Group
Task information Details:
Create the groups site-users and guest-users .
Add qwerty to guest-users .
Add harry and susan to site-users .
Grant edit to site-users on test .
Grant view to guest-users on demo .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create the groups:
oc adm groups new site-users
oc adm groups new guest-users
* Add users to groups:
oc adm groups add-users guest-users qwerty
oc adm groups add-users site-users harry susan
* Grant edit role on test to site-users:
oc policy add-role-to-group edit site-users -n test
* Grant view role on demo to guest-users:
oc policy add-role-to-group view guest-users -n demo
* Verify:
oc get groups
oc describe group site-users
oc describe group guest-users
oc get rolebinding -n test
oc get rolebinding -n demo
This task measures practical administration of OpenShift groups and project-scoped RBAC assignments.
NEW QUESTION # 20
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini The user account wozniak can view project titan but not administer or delete it
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
NEW QUESTION # 21
Configure a secure route
Configure the oxcart application in the area51 project with the following requirements:
The application uses a route called oxcart
The application uses a CA signed certificate with the following subject fields:
/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.com The application produces output A utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.
Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project area51
$ oc get pods
$ oc get all | grep deployment
$ oc get route
$ oc delete route oxcart
$ openssl genrsa -out ex280.key 2048
$ openssl req -new -key ex280.key -out ex280.csr -subj "/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF
/CN=classified.apps.domainxx.example.com"
$ openssl x509 -req -in ex280.csr -signkey ex280.key -out ex280.crt
$ oc create route edge oxcart --service oxcart --key ex280.key --cert ex280.crt --hostname classified.apps.
domainxx.example.com
$ oc get route
$ oc get svc
NEW QUESTION # 22
Manage Cluster Project and Permission
Task information Details:
Create projects apollo , test , and demo .
Grant bob the cluster-admin role.
Prevent ordinary authenticated users from self-provisioning projects.
Allow john to create projects.
Give natasha view-only access to test and apollo .
Give armstrong admin access to apollo .
Remove the kubeadmin user secret.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create the projects:
oc new-project apollo
oc new-project test
oc new-project demo
* Grant cluster-admin to bob:
oc adm policy add-cluster-role-to-user cluster-admin bob
* Disable normal self-provisioning for authenticated users:
oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth
* Allow john to self-provision:
oc adm policy add-cluster-role-to-user self-provisioner john
* Give natasha view access in test and apollo:
oc policy add-role-to-user view natasha -n test
oc policy add-role-to-user view natasha -n apollo
* Give armstrong admin in apollo:
oc policy add-role-to-user admin armstrong -n apollo
* Remove kubeadmin secret:
oc delete secret kubeadmin -n kube-system
* Verify permissions:
oc adm policy who-can create projectrequests
oc describe rolebinding.rbac -n apollo
oc describe rolebinding.rbac -n test
This task tests core OpenShift administration around project lifecycle control, cluster-level RBAC, and decommissioning default bootstrap credentials.
NEW QUESTION # 23
......
Another important objective of the RedHat EX280 certification exam is to test the candidate's ability to create and manage applications on OpenShift clusters. This involves a good understanding of the various application deployment models supported by OpenShift, as well as the tools and techniques used to deploy, manage, and monitor applications on OpenShift clusters.
EX280 Exam Crack Test Engine Dumps Training With 33 Questions: https://exampdf.dumpsactual.com/EX280-actualtests-dumps.html
