P.S. Free 2026 RedHat EX380 dumps are available on Google Drive shared by DumpsReview: https://drive.google.com/open?id=1AqWnSxgw9BxjJbqeok085963YWJDIXjs
Users of DumpsReview software can attempt multiple Red Hat Certified Specialist in OpenShift Automation and Integration (EX380) practice exams to assess and improve preparation for the examination. Customers can view their previous attempts' scores and see their mistakes. It helps test takers take the final Red Hat Certified Specialist in OpenShift Automation and Integration (EX380) exam without making mistakes. The web-based version of the EX380 practice exam can be taken online. It means you can take this mock test via any browser like MS Edge, Firefox, Chrome, Internet Explorer, and Safari.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Implement and manage networking | 15% | - Manage network policies - Troubleshoot network connectivity issues - Configure Ingress and Egress policies |
| Topic 2: Implement CI/CD pipelines | 10% | - Integrate with external CI/CD tools - Configure OpenShift pipelines ( Tekton ) - Automate application deployments |
| Topic 3: Monitor and troubleshoot cluster | 15% | - Monitor cluster health and metrics - Troubleshoot common issues - Analyze logs and events |
| Topic 4: Manage storage for applications | 10% | - Configure persistent storage - Create and use persistent volume claims - Manage storage classes |
| Topic 5: Configure authentication and authorization | 15% | - Create and manage service accounts - Configure RBAC (Role-Based Access Control) - Manage users and groups - Integrate with external identity providers |
| Topic 6: Deploy and manage applications | 20% | - Use ConfigMaps and Secrets - Implement multi-container pods - Configure application scaling and replication - Create and manage deployments |
| Topic 7: Manage OpenShift Container Platform through CLI and Web UI | 15% | - Use oc and kubectl commands for cluster management - Install and configure OpenShift cluster using CLI tools - Navigate and operate through the web console |
The website pages list the important information about our EX380 real quiz, the exam name and code, the total quantity of the questions and answers, the characteristics and merits of the product, the price, the details and the guarantee of our EX380 Training Materials, the contact methods, the evaluations of the client on our product and the related exams. You can analyze the information the website pages provide carefully before you decide to buy our EX380 exam questions.
NEW QUESTION # 22
Maintain group synchronization on a schedule (CronJob)
Task Information : Create a CronJob that runs LDAP group sync on a schedule using a service account that has the required permissions.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Create a namespace for the sync job
* oc new-project id-sync
* Keeps the automation components organized.
* Create a service account for the sync job
* oc -n id-sync create sa group-sync
* CronJob runs under this SA identity.
* Grant cluster permissions to manage groups
* oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:id-sync:group-sync
* In real environments you should scope down, but lab Task SIMULATIONs often accept cluster- admin for speed.
* Create a ConfigMap for groupsync.yaml and Secret(s) for bind password/CA
* Mount them into the job container.
* Create CronJob to run group sync
* Command inside job:
* oc adm groups sync --sync-config=/config/groupsync.yaml --confirm
* The CronJob ensures periodic reconciliation with LDAP.
* Verify job runs
* oc -n id-sync get cronjob
* oc -n id-sync get jobs
* oc -n id-sync logs job/ < job-name >
NEW QUESTION # 23
Create and use a service account token via kubeconfig
Task Information : Create SA ci-bot in ci namespace and generate a kubeconfig that authenticates using its token.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Create namespace and service account
* oc new-project ci
* oc -n ci create sa ci-bot
* The SA will represent automation access.
* Grant permissions (example: edit in namespace)
* oc -n ci policy add-role-to-user edit system:serviceaccount:ci:ci-bot
* Without permissions, token auth succeeds but API actions are denied.
* Generate token (TokenRequest)
* TOKEN=$(oc -n ci create token ci-bot)
* OCP issues a short-lived token by default (good practice).
* Create kubeconfig using the token
* oc config set-cluster lab --server="$(oc whoami --show-server)" \
* --insecure-skip-tls-verify=true --kubeconfig=ci-bot.kubeconfig
* oc config set-credentials ci-bot --token="$TOKEN" --kubeconfig=ci-bot.kubeconfig
* oc config set-context ci --cluster=lab --user=ci-bot --namespace=ci \
* --kubeconfig=ci-bot.kubeconfig
* oc config use-context ci --kubeconfig=ci-bot.kubeconfig
* This produces a self-contained kubeconfig for CI automation.
* Test access
* oc --kubeconfig=ci-bot.kubeconfig get pods
NEW QUESTION # 24
Service Accounts and RBAC - Grant Cluster Reader Role
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Step 1: Confirm the service account exists in auth-audit.
It must exist before a role can be assigned to it.
Step 2: Run the command:
oc adm policy add-cluster-role-to-user cluster-reader system:serviceaccount:auth-audit:audit Step 3: Verify the binding is added.
The lab output shows:
clusterrole.rbac.authorization.k8s.io/cluster-reader added: "system:serviceaccount:auth-audit:audit" Detailed explanation:
This binds the cluster-reader cluster role to the audit service account. The full subject format system:
serviceaccount:namespace:name is required because OpenShift RBAC needs the exact service account identity. The cluster-reader role is broader than a project-scoped view role because it allows read-level access across cluster resources. This is appropriate for auditing or inspection use cases where the account must observe but not modify. The distinction between cluster roles and namespaced roles is important: cluster roles apply to non-namespaced resources and broad cluster visibility, while local roles are limited to individual projects. This Task is a classic RBAC operation that combines identity creation with controlled privilege assignment.
NEW QUESTION # 25
Dedicate nodes to a workload using labels and nodeSelector
Task Information : Label two nodes with workload=payments and schedule a deployment only onto those nodes.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Label the chosen worker nodes
* oc label node worker-1 workload=payments
* oc label node worker-2 workload=payments
* Node labels are key/value metadata used by the scheduler.
* Add a nodeSelector to the deployment
* oc -n payments patch deploy api --type=merge -p '{
* "spec":{"template":{"spec":{"nodeSelector":{"workload":"payments"}}}}
* }'
* Forces pods to schedule only to nodes that match the label.
* Verify placement
* oc -n payments get pods -o wide
* Confirms pods are running on the intended nodes.
NEW QUESTION # 26
Create an Argo CD Application (OpenShift GitOps)
Task Information : Create an Argo CD Application that syncs from Git into namespace gitops-demo with automated sync enabled.
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
* Create target namespace
* oc new-project gitops-demo
* Destination must exist (unless Argo is configured to auto-create).
* Create Application manifest
* apiVersion: argoproj.io/v1alpha1
* kind: Application
* metadata:
* name: demo-app
* namespace: openshift-gitops
* spec:
* project: default
* source:
* repoURL: https://git.example.com/org/repo.git
* targetRevision: main
* path: manifests/demo
* destination:
* server: https://kubernetes.default.svc
* namespace: gitops-demo
* syncPolicy:
* automated:
* prune: true
* selfHeal: true
* automated: enables auto sync.
* prune: removes deleted objects from Git.
* selfHeal: corrects drift.
* Apply Application
* oc apply -f demo-app.yaml
* Verify sync health
* oc -n openshift-gitops get application demo-app -o yaml | grep -i -E "sync|health" -n
* oc -n gitops-demo get all
NEW QUESTION # 27
......
Everyone has their own life planning. Different selects will have different acquisition. So the choice is important. DumpsReview's RedHat EX380 Exam Training materials are the best things to help each IT worker to achieve the ambitious goal of his life. It includes questions and answers, and issimilar with the real exam questions. This really can be called the best training materials.
EX380 Exam Duration: https://www.dumpsreview.com/EX380-exam-dumps-review.html
DOWNLOAD the newest DumpsReview EX380 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1AqWnSxgw9BxjJbqeok085963YWJDIXjs