If you have TestsDumps's RedHat EX280 exam training materials, we will provide you with one-year free update. This means that you can always get the latest exam information. As long as the Exam Objectives have changed, or our learning material changes, we will update for you in the first time. We know your needs, and we will help you gain confidence to pass the RedHat EX280 Exam. You can be confident to take the exam and pass the exam.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Configure Networking and Access | 15% | - Expose services externally
|
| Topic 2: Manage OpenShift Container Platform | 20% | - Manage and configure clusters via web console and CLI
|
| Topic 3: Deploy and Manage Applications | 25% | - Manage application lifecycles
|
| Topic 4: Manage Authentication and Authorization | 15% | - Manage users, groups and permissions
|
| Topic 5: Work with Kubernetes Resources | 25% | - Query, filter and modify resource attributes
|
Some people are worrying about that they cannot operate the windows software and the online test engine of the EX280 training engine smoothly. We ensure that you totally have no troubles in learning our EX280 study materials. All small buttons are designed to be easy to understand. Also, the layout is beautiful and simple. Complex designs do not exist in our EX280 Exam Guide. You can find that our content is easy to follow and practice.
NEW QUESTION # 21
Create Network Policy
Task information Details:
Create a NetworkPolicy named mysql-db-conn that permits ingress to database pods only from pods matching the specified labels in namespaces labeled team=devsecops , on TCP port 3306 .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create a file named mysql-db-conn.yaml:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: mysql-db-conn
spec:
podSelector:
matchLabels:
networking.k8s.io/v1/network: database
policyTypes:
- Ingress
ingress:
- from:
- namespaceSelector:
matchLabels:
team: devsecops
podSelector:
matchLabels:
deployment: my-web-mysql
ports:
- protocol: TCP
port: 3306
* Apply it:
oc apply -f mysql-db-conn.yaml
* Verify:
oc get networkpolicy
oc describe networkpolicy mysql-db-conn
This task tests namespace/pod label selection and application isolation using OpenShift networking policy controls.
NEW QUESTION # 22
Create a PV and PVC
Task information Details:
Create a PersistentVolume named landing-pv with 1Gi , ReadOnlyMany , NFS backend, and Retain reclaim policy.
Create a PersistentVolumeClaim named landing-pvc requesting 1Gi , ReadOnlyMany , and storage class nfs2 .
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Create landing-pv.yaml:
apiVersion: v1
kind: PersistentVolume
metadata:
name: landing-pv
spec:
capacity:
storage: 1Gi
accessModes:
- ReadOnlyMany
nfs:
path: /open001
server: 192.168.2.2
persistentVolumeReclaimPolicy: Retain
* Apply it:
oc apply -f landing-pv.yaml
* Create landing-pvc.yaml:
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: landing-pvc
spec:
accessModes:
- ReadOnlyMany
resources:
requests:
storage: 1Gi
storageClassName: nfs2
* Apply it:
oc apply -f landing-pvc.yaml
* Verify:
oc get pv
oc get pvc
oc describe pv landing-pv
oc describe pvc landing-pvc
This task validates persistent storage provisioning and claim binding concepts.
NEW QUESTION # 23
Configure a secret
Configure a secret in the math project with the following requirements: The name of the secret is: magic The secret defines a key with name: decoder_ring The secret defines the key with value:
XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project math
$ oc create secret generic magic --from-literal key=decoder_ring --from- literal value=XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=
$ oc get secret -n math
NEW QUESTION # 24
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projects The user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projects The user account kubeadmin is not present
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner
system:authenticated:oauth
$ oc adm policy add-cluster-role-to-user self-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system
NEW QUESTION # 25
Deploy an application
Deploy the application called rocky in the bullwinkle project so that the following conditions are true:
The
application is reachable at the following address: http://rocky.apps.domainXX.example.com The application produces output
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project bullwinkle
$ oc get pods
$ oc get all | grep deploy
$ oc get nodes
$ oc describe nodes | grep -i taint
$ oc adm taint nodes worker0 key1=value1:NoSchedule-
$ oc adm taint nodes worker1 key1=value1:NoSchedule-
$ oc describe nodes | grep -i taint
$ oc get route
$ oc delete route rocky
$ oc expose svc rocky --hostname rocky.apps.domainxx.example.com
$ oc get route
NEW QUESTION # 26
......
Our online resources and events enable you to focus on learning just what you want on your timeframe. You get access to every EX280 exams files and there continuously update our EX280 Study Materials; these exam updates are supplied free of charge to our valued customers. Get the best EX280 exam Training; as you study from our exam-files.
EX280 Latest Study Guide: https://www.testsdumps.com/EX280_real-exam-dumps.html