P.S. Free & New EX380 dumps are available on Google Drive shared by PDFBraindumps: https://drive.google.com/open?id=1UwqAsew63nys5jilY0F03p-Cxr7o-PIt
PDFBraindumps can develop well until now. Our developmental force comes from those who have obtained EX380 exam certification with using our products. Today the EX380 exam software provided by our PDFBraindumps has been tested by more and more candidates, which has helped them get the EX380 exam certification. You can download our free demo after you enter the homepage of our website. We hope that you can recognize our product. Once there is any update of EX380 Exam software coming out after you purchased, we will immediately inform you, and make you ease to prepare for the exam.
| Certification Vendor: | Red Hat |
|---|---|
| Exam Name: | Red Hat Certified Specialist in OpenShift Automation and Integration exam |
| Exam Number: | EX380 |
| Exam Format: | Performance-based, Practical tasks, Hands-on lab |
| Exam Price: | $450 USD / โฌ450 EUR |
| Passing Score: | Not disclosed |
| Available Languages: | English |
| Certificate Validity Period: | 3 years |
| Real Exam Qty: | Performance-based tasks, no fixed number |
| Exam Duration: | 240 minutes |
| Related Certifications: | Red Hat Certified Architect (RHCA) |
| Recommended Training: | DO380 - Red Hat OpenShift Automation and Integration |
| Exam Registration: | Red Hat Certification Portal |
| Sample Questions: | RedHat EX380 Sample Questions |
| Exam Way: | Online proctored or onsite at authorized test centers |
| Pre Condition: | Current Red Hat Certified Specialist in OpenShift Administration certification, or equivalent experience matching DO180 and DO280 course topics |
| Official Syllabus URL: | https://www.redhat.com/en/services/training/ex380-certified-specialist-openshift-automation-exam |
Success does not come only from the future, but it continues to accumulate from the moment you decide to do it. At the moment you choose EX380 practice quiz, you have already taken the first step to success. The next thing you have to do is stick with it. EX380 Training Materials will definitely live up to your expectations. Not only our EX380 study materials contain the latest exam questions and answers, but also the pass rate is high as 98% to 100%.
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION # 38
Create and use client certificates with kubeconfig (CSR flow)
Task Information : Generate a client key/CSR for audit2, approve it, extract the signed cert, and build a kubeconfig using that cert.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Generate private key and CSR
* openssl genrsa -out audit2.key 2048
* openssl req -new -key audit2.key -out audit2.csr -subj "/CN=audit2/O=auditors"
* CN becomes username; O can map to groups in some setups.
* Base64 encode CSR for the API object
* CSR=$(base64 -w0 audit2.csr)
* Kubernetes CSR object expects base64-encoded request data.
* Create the CSR object
* cat < < EOF | oc apply -f -
* apiVersion: certificates.k8s.io/v1
* kind: CertificateSigningRequest
* metadata:
* name: audit2-csr
* spec:
* request: ${CSR}
* signerName: kubernetes.io/kube-apiserver-client
* usages:
* - client auth
* EOF
* Approve the CSR
* oc adm certificate approve audit2-csr
* Approval triggers certificate issuance.
* Extract the signed certificate
* oc get csr audit2-csr -o jsonpath='{.status.certificate}' | base64 -d > audit2.crt
* Produces the client certificate file.
* Build kubeconfig using cert/key
* oc config set-credentials audit2 \
* --client-certificate=audit2.crt --client-key=audit2.key \
* --embed-certs=true --kubeconfig=audit2.kubeconfig
* oc config set-cluster lab \
* --server="$(oc whoami --show-server)" \
* --insecure-skip-tls-verify=true \
* --kubeconfig=audit2.kubeconfig
* oc config set-context audit2 \
* --cluster=lab --user=audit2 --namespace=default \
* --kubeconfig=audit2.kubeconfig
* Creates a kubeconfig that authenticates using client certificates.
* Test
* oc --kubeconfig=audit2.kubeconfig get ns
NEW QUESTION # 39
Configure and synchronize OpenShift groups from LDAP (group sync)
Task Information : Create an LDAP group-sync config, run a one-time sync, and confirm groups exist in OpenShift.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Create a group sync config file (example groupsync.yaml)
* This file defines how OpenShift queries LDAP for groups and members.
* Run a one-time group sync
* oc adm groups sync --sync-config=groupsync.yaml --confirm
* --confirm actually applies changes (without it, it's a dry-run preview).
* Verify groups created/updated
* oc get groups
* oc describe group < groupname >
* Confirms group objects exist and membership is present.
NEW QUESTION # 40
Configure project-wide default tolerations
Task Information : Configure the payments namespace so new pods automatically include a default toleration.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Annotate the namespace with default tolerations
* oc annotate ns payments \
* scheduler.alpha.kubernetes.io/defaultTolerations='[{"key":"dedicated","operator":"Equal","value":" payments","effect":"NoSchedule"}]' \
* --overwrite
* Some clusters honor this pattern; if not, the fallback is mutating admission or editing workloads.
* Create a new pod/deployment in the namespace
* Then verify its spec includes tolerations:
* oc -n payments get pod < pod > -o yaml | grep -n tolerations -A5
NEW QUESTION # 41
Service Accounts and RBAC - Grant Cluster Reader Role
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Step 1: Confirm the service account exists in auth-audit.
It must exist before a role can be assigned to it.
Step 2: Run the command:
oc adm policy add-cluster-role-to-user cluster-reader system:serviceaccount:auth-audit:audit Step 3: Verify the binding is added.
The lab output shows:
clusterrole.rbac.authorization.k8s.io/cluster-reader added: "system:serviceaccount:auth-audit:audit" Detailed explanation:
This binds the cluster-reader cluster role to the audit service account. The full subject format system:
serviceaccount:namespace:name is required because OpenShift RBAC needs the exact service account identity. The cluster-reader role is broader than a project-scoped view role because it allows read-level access across cluster resources. This is appropriate for auditing or inspection use cases where the account must observe but not modify. The distinction between cluster roles and namespaced roles is important: cluster roles apply to non-namespaced resources and broad cluster visibility, while local roles are limited to individual projects. This Task is a classic RBAC operation that combines identity creation with controlled privilege assignment.
NEW QUESTION # 42
Kubeconfig Management - Set Credentials in Kubeconfig
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Step 1: Ensure the client certificate and private key files are available.
The lab uses audit.crt and tls.key.
Step 2: Run the command:
oc config set-credentials audit --client-certificate audit.crt --client-key tls.key --embed-certs --kubeconfig audit.config Step 3: Confirm the user entry is written.
The lab output shows:
User "audit" set.
Detailed explanation:
This command creates or updates the audit user entry inside the kubeconfig file audit.config. It points the user to a client certificate and private key, and the --embed-certs option stores certificate material directly inside the kubeconfig rather than only referencing external files. That makes the kubeconfig more portable because it can be moved and used without separately copying the certificate files, provided the embedded content is valid. In certificate-based authentication, the private key proves client possession while the certificate presents the approved identity. If the certificate and key do not match, authentication will fail. This step does not yet define what cluster or namespace the user works against; it only defines the credential identity.
NEW QUESTION # 43
......
Clearer EX380 Explanation: https://www.pdfbraindumps.com/EX380_valid-braindumps.html
P.S. Free & New EX380 dumps are available on Google Drive shared by PDFBraindumps: https://drive.google.com/open?id=1UwqAsew63nys5jilY0F03p-Cxr7o-PIt