EX432 sample questions

Question 1

After creating a `Placement` resource in the `retail-apps` namespace to select OpenShift clusters from the `pos-clusters` `ManagedClusterSet`, a cloud engineer inspects the `Placement` status and sees `NoManagedClusterMatched`. The engineer confirms that three healthy OpenShift clusters carry the label `cluster.open-cluster-management.io/clusterset: pos-clusters` and match the `labelSelector` in the `Placement`.

Based on the architecture shown below, what is required so the `Placement` in `retail-apps` can select clusters from `pos-clusters`?

```mermaid
graph TB
subgraph ClusterScoped["Cluster-Scoped Resources (Hub)"]
MCS[ManagedClusterSet: pos-clusters]
MC1[ManagedCluster: store-01
vendor=OpenShift]
MC2[ManagedCluster: store-02
vendor=OpenShift]
MC1 -->|clusterset label| MCS
MC2 -->|clusterset label| MCS
end
subgraph Namespaced["Namespace: retail-apps"]
Missing[? Missing Resource ?]
PL[Placement: pos-placement
matchLabels: vendor=OpenShift]
Missing -.-> PL
end
MCS ==> Missing
```

Accepted Answer

Create a `ManagedClusterSetBinding` named `pos-clusters` in the `retail-apps` namespace with `spec.clusterSet: pos-clusters` using an account that has `create` permission on `managedclustersets/bind` for `pos-clusters`.

Answer

Label the `retail-apps` `Namespace` resource with `cluster.open-cluster-management.io/clusterset: pos-clusters`.

Answer

Convert `pos-placement` from `Placement` (`v1beta1`) to `PlacementRule` (`apps.open-cluster-management.io/v1`), because `Placement` only evaluates `local-cluster`.

Answer

Create a `PlacementBinding` in `retail-apps` that binds the `pos-clusters` `ManagedClusterSet` to `pos-placement`.

Question 2

Which TWO configurations must be added to a `Placement` resource (`cluster.open-cluster-management.io/v1beta1`) so that it selects at most three clusters whose `region.open-cluster-management.io` cluster claim is `eu-central-1`, and continues to select those clusters even if network connectivity to them is temporarily lost? (Select TWO)

Accepted Answer

Configure `spec.numberOfClusters: 3` and define a predicate under `spec.predicates[].requiredClusterSelector.claimSelector.matchExpressions` matching `key: region.open-cluster-management.io`, `operator: In`, and `values: ["eu-central-1"]`.

Accepted Answer

Add `spec.tolerations` entries with `key: cluster.open-cluster-management.io/unreachable` and `key: cluster.open-cluster-management.io/unavailable` set to `operator: Exists`.

Answer

Add a node selector under `spec.nodeSelector` with `node-role.kubernetes.io/unreachable: ""` and `maxClusters: 3`.

Answer

Set `spec.clusterReplicas: 3` and configure `spec.predicates[].requiredClusterSelector.labelSelector.matchClaims` with `region.open-cluster-management.io: eu-central-1`.

Answer

Set `spec.keepOfflineClusters: true` and `spec.requeueAfterSeconds: 300` at the top level of the `Placement` specification.

Question 3

During an incident triage session across thirty managed clusters, an SRE needs to query the RHACM 2.13 console search bar to find all Pod resources in any namespace whose name begins with `payment-`, whose status is NOT `Running`, and that have restarted more than once. Which search query syntax returns this exact set of resources?

Accepted Answer

`kind:pod namespace:payment-* status:!Running restarts:>1`

Answer

`type:Pod WHERE namespace LIKE 'payment-%' AND status 'Running' AND restarts > 1`

Answer

`resource=pod namespace=~"^payment-.*" status NOT Running restarts >= 1`

Answer

`kind:pod namespace:payment-? status:-Running restarts:+1`

Question 4

Because pod restarts on the hub cluster have been wiping out the search index database in a 180-cluster fleet, a cluster administrator needs to configure persistent storage (`20Gi` using the `gp3-csi` storage class) for the RHACM 2.13 search service. How should this configuration be applied, and what PersistentVolumeClaim (PVC) is created as a result?

Accepted Answer

Modify the `Search` custom resource named `search-v2-operator` in the `open-cluster-management` namespace to set `spec.dbStorage.size: 20Gi` and `spec.dbStorage.storageClassName: gp3-csi`, which creates a PVC named `gp3-csi-search`.

Answer

Edit the `MultiClusterHub` resource to set `spec.search.persistence.size: 20Gi` and `spec.search.persistence.storageClass: gp3-csi`, which creates a PVC named `search-postgres-pvc`.

Answer

Create a ConfigMap named `search-collector-config` in `open-cluster-management-agent-addon` with `dbStorageSize: 20Gi` and `storageClassName: gp3-csi`, which creates a PVC named `search-v2-gp3-csi`.

Answer

Annotate the `search-postgres` Deployment directly with `search.open-cluster-management.io/storage-class: gp3-csi`, because the `Search` operator does not manage database storage fields in its CRD.

Question 5

A governance engineer updates a parent `Policy` resource (`policy.open-cluster-management.io/v1`) so that its top-level `spec.remediationAction` is set to `enforce`. Inside `spec.policy-templates`, the policy contains two `ConfigurationPolicy` objects:

- Template 1 checks a `ConfigMap` with `remediationAction: InformOnly` and `complianceType: mustonlyhave`.
- Template 2 checks a `RoleBinding` with `remediationAction: inform` and `complianceType: musthave`.

When the updated parent `Policy` is propagated to a non-compliant managed cluster, how does the configuration policy controller process the two templates?

Accepted Answer

Template 1 remains in inform mode and only reports violations because `InformOnly` prevents parent policy enforcement, whereas Template 2 is overridden by the parent policy and enforced.

Answer

Template 1 is enforced because `mustonlyhave` requires active remediation, whereas Template 2 fails validation because `inform` is case-sensitive.

Answer

Both Template 1 and Template 2 are enforced on the managed cluster because the parent `Policy` `spec.remediationAction` overrides all child template settings.

Answer

Neither Template 1 nor Template 2 is enforced because a parent `Policy` cannot override a child `ConfigurationPolicy` that explicitly declares a `remediationAction` field.

Question 6

In a `ConfigurationPolicy` specification (`policy.open-cluster-management.io/v1`), the `_____` parameter determines whether related Kubernetes objects on the managed cluster are deleted (`DeleteAll` or `DeleteIfCreated`) or retained (`None`) when the policy is deleted.

Accepted Answer

pruneObjectBehavior

Answer

cleanupAction

Answer

cascadeDeletePolicy

Answer

orphanPropagation

Top vendors

Top exams

Free EX432 sample questions

In a `ConfigurationPolicy` specification (`policy.open-cluster-management.io/v1`), the `_____` parameter determines whether related Kubernetes objects on the managed cluster are deleted (`DeleteAll` or `DeleteIfCreated`) or retained (`None`) when the policy is deleted.

6 more free samples are waiting