RedHat Red Hat Certified Specialist in OpenShift Administration (EX280) Free Practice Test
Question 1
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini The user account wozniak can view project titan but not administer or delete it
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini The user account wozniak can view project titan but not administer or delete it
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
Explanation:
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan
Question 2
Create Secure Route in Quart Project
Task information Details:
Create an edge route named htquart for service httpd , using the specified hostname and TLS certificate/key files.
Task information Details:
Create an edge route named htquart for service httpd , using the specified hostname and TLS certificate/key files.
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the quart project:
oc project quart
* Create the secure route:
oc create route edge htquart \
--service=httpd \
--hostname=quart.apps.ocp4.example.com \
--cert=./req.crt \
--key=./req.key
* Verify:
oc get route htquart
oc describe route htquart
* Test resolution and access if DNS is available:
curl -k https://quart.apps.ocp4.example.com
This task checks route exposure, TLS termination, and secure ingress administration.
Explanation:
Solution:
* Switch to the quart project:
oc project quart
* Create the secure route:
oc create route edge htquart \
--service=httpd \
--hostname=quart.apps.ocp4.example.com \
--cert=./req.crt \
--key=./req.key
* Verify:
oc get route htquart
oc describe route htquart
* Test resolution and access if DNS is available:
curl -k https://quart.apps.ocp4.example.com
This task checks route exposure, TLS termination, and secure ingress administration.
Question 3
Configure groups
Configure your OpenShift cluster to meet the following requirements: The user account armstrong is a member of the commander group The user account collins is a member of the pilot group The user account aldrin is a member of the pilot group Members of the commander group have edit permission in the apollo project Members of the pilot group have view permission in the apollo project
Configure your OpenShift cluster to meet the following requirements: The user account armstrong is a member of the commander group The user account collins is a member of the pilot group The user account aldrin is a member of the pilot group Members of the commander group have edit permission in the apollo project Members of the pilot group have view permission in the apollo project
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
$ oc adm groups new commander
$ oc adm groups new pilot
$ oc adm groups add-users commander armstrong
$ oc adm groups add-users pilot collins
$ oc adm groups add-users pilot aldrin
$ oc adm policy add-role-to-group edit commander -n apollo
$ oc adm policy add-role-to-group view pilot -n apollo
Explanation:
Solution:
$ oc adm groups new commander
$ oc adm groups new pilot
$ oc adm groups add-users commander armstrong
$ oc adm groups add-users pilot collins
$ oc adm groups add-users pilot aldrin
$ oc adm policy add-role-to-group edit commander -n apollo
$ oc adm policy add-role-to-group view pilot -n apollo
Question 4
Create Service Account in QED
Task information Details:
Switch to project qed .
Create service account project1-sa .
Grant the anyuid SCC to that service account.
Task information Details:
Switch to project qed .
Create service account project1-sa .
Grant the anyuid SCC to that service account.
Correct Answer:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the project:
oc project qed
* Create the service account:
oc create serviceaccount project1-sa -n qed
* Grant the SCC:
oc adm policy add-scc-to-user anyuid -z project1-sa -n qed
* Verify:
oc get sa project1-sa -n qed
oc adm policy who-can use scc anyuid
Why this matters:
* anyuid allows containers to run with arbitrary user IDs when an application requires it.
* This is a common administrative task in OpenShift for third-party container images.
This task validates service account creation and SCC assignment.
Explanation:
Solution:
* Switch to the project:
oc project qed
* Create the service account:
oc create serviceaccount project1-sa -n qed
* Grant the SCC:
oc adm policy add-scc-to-user anyuid -z project1-sa -n qed
* Verify:
oc get sa project1-sa -n qed
oc adm policy who-can use scc anyuid
Why this matters:
* anyuid allows containers to run with arbitrary user IDs when an application requires it.
* This is a common administrative task in OpenShift for third-party container images.
This task validates service account creation and SCC assignment.