Free RedHat EX280 Practice Exam with Questions & Answers

Solution:

Ensure the project exists and switch to it:

oc new-project rocky

oc project rocky

Create the quota:

oc create quota rocky-quota \

--hard=limits.cpu=2,limits.memory=1Gi,pods=3,services=6,replicationcontrollers=6,secrets=6

Verify:

oc get resourcequota -n rocky

oc describe quota rocky-quota -n rocky

Notes:

The lab text uses cpu=2,memory=1G and secret=6; in real OpenShift usage, the more reliable forms are limits.cpu, limits.memory, and secrets.

If the exam specifically expects the exact resource names shown in the lab environment, use what the cluster accepts.

This task checks quota enforcement and namespace resource governance.

Solution:

Open the Web Console.

Switch to project start .

Navigate to: Workloads → Deployments

Select the target deployment.

Click the action menu and choose: Add Health Checks

Select Liveness Probe .

Configure the appropriate probe type:

HTTP

TCP

or Command

Enter the required endpoint or command based on the application.

Save the configuration.

Verify the deployment updates successfully and the pod status remains healthy.

CLI alternative if needed:

oc set probe deployment/ < deployment-name > --liveness --get-url=http://:8080/ --initial-delay-seconds=10

This task measures health-check configuration for workload self-recovery.

Solution:

$ oc project lerna

$ oc get pods

$ oc get all | grep deployment

$ oc autoscale deployment.apps/hydra --max=9 --min=6 --cpu-percent=60

$ oc get hpa

$ oc set resources deployment.apps/hydra --limits=cpu=100m -- requests=cpu=25m

$ oc describe deployment.apps/hydra | grep Limits -A3

Solution:

Generate the default template:

oc adm create-bootstrap-project-template -o yaml > template.yaml

Review and edit template.yaml if required.

Create the template in openshift-config:

oc create -f template.yaml -n openshift-config

Edit the cluster project configuration:

oc edit project.config.openshift.io/cluster

Add or update:

spec:

projectRequestTemplate:

name: project-request

Save and exit.

Create a test project:

oc new-project test123

Verify the template behavior:

oc get project test123 -o yaml

Notes:

The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.config.openshift.io/cluster.

This task checks cluster-wide customization of new-project creation behavior.

Solution:

Create a file named mysql-db-conn.yaml:

apiVersion: networking.k8s.io/v1

kind: NetworkPolicy

metadata:

name: mysql-db-conn

spec:

podSelector:

matchLabels:

networking.k8s.io/v1/network: database

policyTypes:

- Ingress

ingress:

- from:

- namespaceSelector:

matchLabels:

team: devsecops

podSelector:

matchLabels:

deployment: my-web-mysql

ports:

- protocol: TCP

port: 3306

Apply it:

oc apply -f mysql-db-conn.yaml

Verify:

oc get networkpolicy

oc describe networkpolicy mysql-db-conn

This task tests namespace/pod label selection and application isolation using OpenShift networking policy controls.

Solution:

Create landing-pv.yaml:

apiVersion: v1

kind: PersistentVolume

metadata:

name: landing-pv

spec:

capacity:

storage: 1Gi

accessModes:

- ReadOnlyMany

nfs:

path: /open001

server: 192.168.2.2

persistentVolumeReclaimPolicy: Retain

Apply it:

oc apply -f landing-pv.yaml

Create landing-pvc.yaml:

apiVersion: v1

kind: PersistentVolumeClaim

metadata:

name: landing-pvc

spec:

accessModes:

- ReadOnlyMany

resources:

requests:

storage: 1Gi

storageClassName: nfs2

Apply it:

oc apply -f landing-pvc.yaml

Verify:

oc get pv

oc get pvc

oc describe pv landing-pv

oc describe pvc landing-pvc

This task validates persistent storage provisioning and claim binding concepts.

Solution:

Add the repository:

helm repo add do280-repo http://helm.ocp4.example.com/charts

Refresh repositories:

helm repo update

Install the chart:

helm install example-app do280-repo/etherpad

Verify:

helm list

oc get all

Notes:

The uploaded lab text appears to spell the chart name incorrectly as ehterpad.

In practice, use the actual chart name published in the repo. If the lab repo truly contains the typo, follow the repo index result.

This task tests Helm repository management and application deployment.

Solution:

$ oc new-project apollo

$ oc new-project manhattan

$ oc new-project gemini

$ oc new-project bluebook

$ oc new-project titan

$ oc adm policy add-role-to-user admin armstrong -n apollo

$ oc adm policy add-role-to-user admin armstrong -n gemini

$ oc adm policy add-role-to-user view wozniak -n titan

Solution:

$ oc project apples

$ oc create sa ex280sa

$ oc adm policy add-scc-to-user anyuid -z ex280sa