What we provide for you is the latest and comprehensive EX280 exam dumps, the safest purchase guarantee and the immediate update of EX280 exam software. Free demo download can make you be rest assured to buy; one-year free update of EX280 Exam software after payment can assure you during your preparation for the exam. What's more, what make you be rest assured most is that we develop the exam software which will help more candidates get EX280 exam certification.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Configure Networking and Access | 15% | - Expose services externally
|
| Topic 2: Work with Kubernetes Resources | 25% | - Manage configuration data
|
| Topic 3: Manage OpenShift Container Platform | 20% | - Manage and configure clusters via web console and CLI
|
| Topic 4: Manage Authentication and Authorization | 15% | - Manage users, groups and permissions
|
| Topic 5: Deploy and Manage Applications | 25% | - Manage application lifecycles
|
Test4Sure offers Red Hat Certified Specialist in OpenShift Administration exam (EX280) practice exams (desktop & web-based) which are customizable. It means candidates can set time and RedHat EX280 questions of the EX280 practice exam according to their learning needs. The Real EX280 Exam environment of practice test help test takers to get awareness about the test pressure so that they become capable to counter this pressure during the final exam.
NEW QUESTION # 26
Configure cluster permissions
Configure your OpenShift cluster to meet the following requirements: The user account jobs can perform cluster administration tasks The user account wozniak can create projects The user account wozniak cannot perform cluster administration tasks The user account armstrong cannot create projects The user account kubeadmin is not present
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc adm policy add-cluster-role-to-user cluster-admin jobs
$ oc adm policy remove-cluster-role-from-group self-provisioner
system:authenticated:oauth
$ oc adm policy add-cluster-role-to-user self-provisioner wozniak
$ oc delete secret kubeadmin -n kube-system
NEW QUESTION # 27
Deploy an application
Deploy the application called oranges in the apples project so that the following conditions are true:
The application uses the ex280sa service account
No additional configuration components have been added or removed The application produces output
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project mercury
$ oc get pods
$ oc get all | grep deploy
$ oc describe deployment.apps/atlas | grep -L memory
$ oc set resources deployment.apps/atlas --resources=memory=80Mi
NEW QUESTION # 28
Configure a secure route
Configure the oxcart application in the area51 project with the following requirements:
The application uses a route called oxcart
The application uses a CA signed certificate with the following subject fields:
/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.com The application produces output A utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.
Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project area51
$ oc get pods
$ oc get all | grep deployment
$ oc get route
$ oc delete route oxcart
$ openssl genrsa -out ex280.key 2048
$ openssl req -new -key ex280.key -out ex280.csr -subj "/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF
/CN=classified.apps.domainxx.example.com"
$ openssl x509 -req -in ex280.csr -signkey ex280.key -out ex280.crt
$ oc create route edge oxcart --service oxcart --key ex280.key --cert ex280.crt --hostname classified.apps.
domainxx.example.com
$ oc get route
$ oc get svc
NEW QUESTION # 29
Create a CronJob test-cron
Task information Details:
Create service account jupiter .
Grant anyuid SCC and cluster- admin to it.
Update CronJob cron-test to use that service account.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
* Switch to the project hosting the cronjob, if needed:
oc project cron-test
* Create the service account:
oc create sa jupiter
* Grant anyuid:
oc adm policy add-scc-to-user anyuid -z jupiter -n cron-test
* Grant cluster-admin:
oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:cron-test:jupiter
* Update the cronjob:
oc patch cronjob cron-test -p '{"spec":{"jobTemplate":{"spec":{"template":{"spec":{"serviceAccountName":" jupiter"}}}}}}'
* Verify:
oc get cronjob cron-test -o yaml | grep serviceAccountName
Notes:
* The uploaded lab uses oc set sa cronjob.batch/cron-test jupiter, which is not the usual command form for CronJobs. Patching the pod template is the reliable method.
This task checks service account and privilege adjustments for scheduled workloads.
NEW QUESTION # 30
Configure a service account
Configure a service account in the apples project to meet the following requirements:
The name of the account is ex280sa
The account allows pods to be run as any available user
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
Solution:
$ oc project apples
$ oc create sa ex280sa
$ oc adm policy add-scc-to-user anyuid -z ex280sa
NEW QUESTION # 31
......
With all the questons and answers of our RedHat EX280 study materials, your success is guaranteed. Moreover, we have Demos as freebies. The free demos give you a prove-evident and educated guess about the content of our Red Hat Certified Specialist in OpenShift Administration exam EX280 Practice Questions. As long as you make up your mind on this EX280 exam, you can realize their profession is unquestionable.
EX280 Latest Exam Pass4sure: https://www.test4sure.com/EX280-pass4sure-vce.html