You can alter the duration and quantity of RedHat EX280 questions in these RedHat EX280 practice exams as per your training needs. For offline practice, our EX280 desktop practice test software is ideal. This EX280 software runs on Windows computers. The EX280 web-based practice exam is compatible with all browsers and operating systems.
| Section | Objectives |
|---|---|
| Topic 1: Storage and Persistence | - Persistent storage configuration
|
| Topic 2: Cluster Administration | - User and role management
|
| Topic 3: Security and Troubleshooting | - Security management
|
| Topic 4: Networking and Ingress | - Cluster networking
|
| Topic 5: OpenShift Cluster Installation and Configuration | - Cluster setup and installation verification
|
>> EX280 Latest Test Testking <<
When new changes or knowledge are updated, our experts add additive content into our EX280 latest material. They have always been in a trend of advancement. Admittedly, our EX280 real questions are your best choice. We also estimate the following trend of exam questions may appear in the next exam according to syllabus. So they are the newest and also the most trustworthy EX280 Exam Prep to obtain.
NEW QUESTION # 24
Scale an application manually
Manually scale the minion application in the gru project to a total of 5 replicas.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project gru
$ oc get pods
$ oc get all | grep deployment
$ oc scale --replicas=5 deployment.apps/minion
$ oc get pods
NEW QUESTION # 25
Configure a secure route
Configure the oxcart application in the area51 project with the following requirements:
The application uses a route called oxcart
The application uses a CA signed certificate with the following subject fields:
/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.com The application produces output A utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.
Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project area51
$ oc get pods
$ oc get all | grep deployment
$ oc get route
$ oc delete route oxcart
$ openssl genrsa -out ex280.key 2048
$ openssl req -new -key ex280.key -out ex280.csr -subj "/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF
/CN=classified.apps.domainxx.example.com"
$ openssl x509 -req -in ex280.csr -signkey ex280.key -out ex280.crt
$ oc create route edge oxcart --service oxcart --key ex280.key --cert ex280.crt --hostname classified.apps.
domainxx.example.com
$ oc get route
$ oc get svc
NEW QUESTION # 26
Create Network Policy
Task information Details:
Create a NetworkPolicy named mysql-db-conn that permits ingress to database pods only from pods matching the specified labels in namespaces labeled team=devsecops , on TCP port 3306 .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create a file named mysql-db-conn.yaml:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: mysql-db-conn
spec:
podSelector:
matchLabels:
networking.k8s.io/v1/network: database
policyTypes:
- Ingress
ingress:
- from:
- namespaceSelector:
matchLabels:
team: devsecops
podSelector:
matchLabels:
deployment: my-web-mysql
ports:
- protocol: TCP
port: 3306
* Apply it:
oc apply -f mysql-db-conn.yaml
* Verify:
oc get networkpolicy
oc describe networkpolicy mysql-db-conn
This task tests namespace/pod label selection and application isolation using OpenShift networking policy controls.
NEW QUESTION # 27
Manage Identity Provider
Task information Details:
Create the following HTPasswd users: bob, qwerty, john, armstrong, natasha, harry, susan .
Create a secret from the HTPasswd file in openshift-config .
Configure cluster OAuth to use the HTPasswd identity provider.
Restart the OAuth pods so the new authentication configuration takes effect.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create the initial HTPasswd file with the first user:
htpasswd -c -B -b /tmp/htpass.txt bob indionce
* Add the remaining users:
htpasswd -b /tmp/htpass.txt qwerty catalog
htpasswd -b /tmp/htpass.txt john john123
htpasswd -b /tmp/htpass.txt armstrong natasha123
htpasswd -b /tmp/htpass.txt natasha arthstrong
htpasswd -b /tmp/htpass.txt harry harry123
htpasswd -b /tmp/htpass.txt susan susuan123
* Create the secret in openshift-config :
oc create secret generic ex280-secure --from-file=htpasswd=/tmp/htpass.txt -n openshift-config
* Edit OAuth and add the HTPasswd identity provider:
oc edit oauth cluster
* Use a valid structure like this:
spec:
identityProviders:
- name: ex280-idp-secure
mappingMethod: claim
type: HTPasswd
htpasswd:
fileData:
name: ex280-secure
* Save and exit.
* Restart OAuth pods:
oc delete pod -n openshift-authentication -l app=oauth-openshift
* Verify:
oc get pods -n openshift-authentication
oc get oauth cluster -o yaml
This task validates OpenShift local authentication configuration through HTPasswd and cluster OAuth integration.
NEW QUESTION # 28
Create a CronJob test-cron
Task information Details:
Create service account jupiter .
Grant anyuid SCC and cluster- admin to it.
Update CronJob cron-test to use that service account.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the project hosting the cronjob, if needed:
oc project cron-test
* Create the service account:
oc create sa jupiter
* Grant anyuid:
oc adm policy add-scc-to-user anyuid -z jupiter -n cron-test
* Grant cluster-admin:
oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:cron-test:jupiter
* Update the cronjob:
oc patch cronjob cron-test -p '{"spec":{"jobTemplate":{"spec":{"template":{"spec":{"serviceAccountName":" jupiter"}}}}}}'
* Verify:
oc get cronjob cron-test -o yaml | grep serviceAccountName
Notes:
* The uploaded lab uses oc set sa cronjob.batch/cron-test jupiter, which is not the usual command form for CronJobs. Patching the pod template is the reliable method.
This task checks service account and privilege adjustments for scheduled workloads.
NEW QUESTION # 29
......
GetValidTest also has a RedHat Practice Test engine that can be used to simulate the genuine EX280 exam. This online practice test engine allows you to answer questions in a simulated environment, giving you a better understanding of the exam's structure and format. With the help of this tool, you may better prepare for the Red Hat Certified Specialist in OpenShift Administration exam (EX280) test.
EX280 Test Sample Questions: https://www.getvalidtest.com/EX280-exam.html