RedHat EX280 Exam Actual Questions
Red Hat Certified OpenShift Administrator (Page 2 )

Updated On: 18-Jul-2026

SIMULATION
Configure an identity provider
Configure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:
The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secret
The user account armstrong=indionce The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiver
The user account wozniak=glegunge

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ sudo yum install httpd-tools -y
$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce
$ htpasswd -B -b htpasswd-file collins veraster
$ htpasswd -B -b htpasswd-file aldrin roonkere
$ htpasswd -B -b htpasswd-file jobs sestiver
$ htpasswd -B -b htpasswd-file wozniak glegunge
$ oc create secret generic ex280-idp-secret --from-file htpasswd=htpasswd-file -n openshift-config
$ oc get oauth/cluster -o yaml> oauth.yaml
$ vim oauth.yaml
$
esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting spec:
identityProviders:
- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:
fileData:
name: ex280-idp-secret
$ oc replace -f oauth.yaml
$ oc login -u armstrong -p indionce
$ oc login -u collins -p veraster
$ oc login -u aldrin roonkere
$ oc login -u jobs sestiver
$ oc login -u wozniak -p glegunge
#This below part of operation is completely optional and done just for handy login purpose
$ alias _kube="oc login -u kubeadmin -p ${kube_pass} ${api_url}"
$ alias _armstrong="oc login -u armstrong -p ${armstrong}
${api_url}"
$ alias _collins="oc login -u collins -p ${collins} ${api_url}"
$ alias _aldrin="oc login -u aldrin -p ${aldrin} ${api_url}"
$ alias _jobs="oc login -u jobs -p ${jobs} ${api_url}"
$ alias _wozniak="oc login -u wozniak -p ${wozniak} ${api_url}"
$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;



SIMULATION
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projects
The user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projects
The user account kubeadmin is not present

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth
$ oc adm policy add-cluster-role-to-user self-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system



SIMULATION
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini
The user account wozniak can view project titan but not administer or delete it

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan



SIMULATION
Configure groups
Configure your OpenShift cluster to meet the following requirements: The user account armstrong is a member of the commander group The user account collins is a member of the pilot group
The user account aldrin is a member of the pilot group
Members of the commander group have edit permission in the apollo project Members of the pilot group have view permission in the apollo project

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc adm groups new commander
$ oc adm groups new pilot
$ oc adm groups add-users commander armstrong
$ oc adm groups add-users pilot collins
$ oc adm groups add-users pilot aldrin
$ oc adm policy add-role-to-group edit commander -n apollo
$ oc adm policy add-role-to-group view pilot -n apollo



SIMULATION
Configure quotas
Configure your OpenShift cluster to use quotas in the manhattan project with the following requirements:
The name of the ResourceQuota resource is: ex280-quota
The amount of memory consumed across all containers may not exceed 1Gi
The total amount of CPU usage consumed across all containers may not exceed
2 full cores
The maximum number of replication controllers does not exceed 3 The maximum number of pods does not exceed 3
The maximum number of services does not exceed 6

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc project manhattan
$ oc create quota ex280-quota --hard=memory=1Gi,cpu=2,pods=3,services=6,replicationcontrollers=3
$ oc get resourcequota



SIMULATION
Configure limits
Configure your OpenShift cluster to use limits in the bluebook project with the following requirements:
The name of the LimitRange resource is: ex280-limits
The amount of memory consumed by a single pod is between 5Mi and 300Mi The amount of memory consumed by a single container is between 5Mi and
300Mi with a default request value of 100Mi
The amount of CPU consumed by a single pod is between 10m and 500m
The amount of CPU consumed by a single container is between 10m and 500m with a default request value of 100m

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ vim limit.yaml
# Edit the yaml file like below mentioned apiVersion: "v1" kind: "LimitRange" metadata:
name: "resource-limits" spec:
limits:
- type: "Pod"
max:
cpu: "500m" memory: "300Mi"
min:
cpu: "10m" memory: "5Mi"
- type: "Container" max:
cpu: "500m" memory: "300Mi"
min:
cpu: "10m" memory: "5Mi"
defaultRequest: cpu: "100m" memory: "100Mi"
$ oc create -f limit.yaml --save-config -n bluebook
$ oc describe limitranges -n bluebook



SIMULATION
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The application is reachable at the following address: http://rocky.apps.domainXX.example.com
The application produces output

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc project bullwinkle
$ oc get pods
$ oc get all | grep deploy
$ oc get nodes
$ oc describe nodes | grep -i taint
$ oc adm taint nodes worker0 key1=value1:NoSchedule-
$ oc adm taint nodes worker1 key1=value1:NoSchedule-
$ oc describe nodes | grep -i taint
$ oc get route
$ oc delete route rocky
$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com
$ oc get route



SIMULATION
Scale an application manually
Manually scale the minion application in the gru project to a total of 5 replicas.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Solution:
$ oc project gru
$ oc get pods
$ oc get all | grep deployment
$ oc scale --replicas=5 deployment.apps/minion
$ oc get pods



Viewing page 2 of 6
Viewing questions 9 - 16 out of 33 questions


Post your Comments and Discuss RedHat EX280 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!