EX280 sample questions

Question 1

You are the OpenShift Administrator for a financial institution. A development team needs to expose a secure internal banking API to external partners. The application handles sensitive data that must be encrypted from the client all the way to the pod. The TLS termination must not occur at the router level; the router should simply forward the encrypted traffic to the destination pod which holds the private key. Which Route configuration strategy should you implement?

Accepted Answer

Passthrough Termination

Answer

Edge Termination

Answer

Re-encrypt Termination

Answer

Unsecured Route

Question 2

A developer reports that their application deployment in the 'frontend' project is failing to create new pods. Upon investigation, you see the message 'Forbidden: exceeded quota: compute-resources, requested: requests.cpu=200m, used: requests.cpu=1800m, limited: requests.cpu=2'. What is the most immediate cause of this issue?

Accepted Answer

The project's ResourceQuota for CPU requests has been reached.

Answer

The node running the pods has run out of CPU capacity.

Answer

The LimitRange for the project requires a minimum CPU request that the pod does not meet.

Answer

The cluster-wide ClusterResourceQuota has been exhausted for this user.

Question 3

You are configuring an HTPasswd identity provider for an OpenShift 4 cluster. You have already created the 'htpasswd' file with the user credentials. Which of the following sequences correctly describes the next steps to activate this authentication mechanism?

Accepted Answer

Create a Kubernetes Secret containing the htpasswd file data in the 'openshift-config' namespace, then edit the 'OAuth' cluster resource to reference this secret.

Answer

Copy the file to the master nodes /etc/origin/master directory and restart the API server.

Answer

Create a ConfigMap in the 'openshift-authentication' namespace and redeploy the router.

Answer

Run 'oc adm policy add-scc-to-user' to link the file to the authentication operator.

Question 4

Your organization requires a specific set of Kustomize overlays for deploying an application to Development, Stage, and Production environments. You have a 'base' directory containing the common deployment.yaml and service.yaml. You need to ensure the Production overlay scales the replicas to 5 and changes the image tag to 'stable'.

Which file structure and content is correct for the production overlay?

Accepted Answer

Create a 'production' directory. In 'kustomization.yaml', add 'resources: [../base]' and a 'patches' list targeting the Deployment to update replicas and image.

Answer

Edit the base deployment.yaml directly to use variables like ${REPLICAS} and ${IMAGE_TAG}, then pass these variables during 'oc apply'.

Answer

Create a Helm chart in the production directory and use 'helm install' to reference the base kustomization.

Answer

Copy all YAML files from base to production directory and manually edit the values in the new files.

Question 5

You need to grant a specific user, 'alice', the ability to view all resources in the 'marketing' project, but she should not be able to modify any resources. Which command achieves this using the default ClusterRoles?

Accepted Answer

oc adm policy add-role-to-user view alice -n marketing

Answer

oc adm policy add-cluster-role-to-user view alice -n marketing

Answer

oc create rolebinding alice-view --clusterrole=view --user=alice

Answer

oc policy add-user alice --role=read-only -n marketing

Question 6

A database pod in the 'db-prod' project keeps restarting with an 'OOMKilled' error. You determine that the application needs more memory than the current limit allows. The project has a ResourceQuota 'quota-prod' with 'limits.memory: 10Gi' and 'used: 9.5Gi'. The pod requests 1Gi. What must you do to successfully deploy the fix?

Accepted Answer

First increase the 'limits.memory' in the ResourceQuota 'quota-prod', then increase the pod's memory limit.

Answer

Increase the pod's memory limit in the deployment configuration.

Answer

Delete the LimitRange in the project to bypass the quota check.

Answer

Use the 'oc scale' command to reduce the number of replicas to 0, update the pod definition, and scale back up.

Top vendors

Top exams

Free EX280 sample questions

You are configuring an HTPasswd identity provider for an OpenShift 4 cluster. You have already created the 'htpasswd' file with the user credentials. Which of the following sequences correctly describes the next steps to activate this authentication mechanism?

You need to grant a specific user, 'alice', the ability to view all resources in the 'marketing' project, but she should not be able to modify any resources. Which command achieves this using the default ClusterRoles?

6 more free samples are waiting