Reinforce EX280 concepts with active-recall study cards covering all 7 blueprint domains. Each card shows the question on the front and the correct answer with a full explanation on the back.
Flashcards work through active recall — the process of retrieving information from memory rather than passively re-reading it. Research consistently shows that active recall produces stronger, longer-lasting memory than re-reading study guides. For EX280 preparation, this means flashcards are one of the highest-return study tools available.
Attempt recall first
Read the EX280 question on each card, pause, and attempt to formulate the answer in your own words before revealing. This retrieval attempt — even if wrong — dramatically strengthens memory compared to immediately reading the answer.
Review wrong cards again
When you get a card wrong, note it and add it back to your review pile. Spaced repetition — seeing difficult cards more frequently — is the mechanism that makes flashcard study far more efficient than linear reading.
Study by domain
Group your EX280 flashcard sessions by domain for the first 3–4 weeks. Master one domain before moving to the next. In the final week, shuffle all cards together to test cross-domain recall — which is what the real EX280 exam requires.
Short sessions beat marathon reviews
20–30 flashcard cards per session, done daily, produces better retention than a single 200-card marathon session. Five short daily sessions per week over 4 weeks gives you over 400 total card reviews — enough to reliably pass EX280.
Sample cards from the EX280 flashcard bank. Read the question, think of the answer, then read the explanation below.
An administrator has created a custom SCC named restricted-custom. During testing, pods using this SCC still fail because they are assigned the non-root UID range automatically, but the application container requires writing to a specific directory owned by UID 1000. How should the administrator configure the SCC to ensure the container runs consistently as UID 1000?
Set runAsUser.type to MustRunAs and specify uid: 1000 in the uidRange
To force a specific UID execution, the runAsUser strategy must be set to MustRunAs with a uidRange specifying UID 1000.
An OpenShift administrator observes that the 'authentication' ClusterOperator is reporting Available=False, Progressing=True, and Degraded=True. During troubleshooting, they notice that the kube-apiserver cannot validate tokens because the OAuth server routes are unreachable due to a misconfigured ingress controller. Which log collection method is best suited to pinpoint the OAuth metadata retrieval failure?
oc logs -n openshift-authentication deployment/oauth-openshift
Checking the operator pods in openshift-authentication namespace using oc logs on the oauth-openshift deployment provides the exact HTTP communication errors.
An OpenShift cluster uses an external identity provider (IdP). A user named 'alex@example.com' has successfully logged in via the web console. You need to verify which groups this user belongs to from the command line as an administrator. Which command provides this information?
oc describe user alex@example.com
The 'oc describe user alex@example.com' command displays the user object details, including identities and groups associated with the user.
An administrator needs to modify the SSH key used for debugging worker nodes across an OpenShift 4.14 cluster. Which resource type should the administrator edit or create to apply this change cluster-wide to all worker nodes?
Create or modify a MachineConfig object that targets the worker role and specifies the sshKey field.
MachineConfig objects allow administrators to manage node-level configuration changes, including injecting authorized SSH keys for the core user.
A cluster administrator notices that a NetworkPolicy applied to the database namespace is dropping traffic from the frontend namespace. The policy uses namespaceSelector. Which label must be present on the frontend namespace for traffic to be successfully allowed?
A custom label defined in the namespaceSelector of the NetworkPolicy spec
When using namespaceSelector in a NetworkPolicy, the target namespace must be labeled appropriately so the label matches the selector criteria specified in the ingress rule.
An OpenShift administrator needs to trigger a rollback of a Deployment to its previous working revision after a failed update. Which oc command should be used?
oc rollout undo deployment/my-app
The oc rollout undo command reverts a deployment back to a previous revision in the rollout history.
A developer requests a PersistentVolumeClaim using ReadWriteMany access mode. Which default storage type in a standard AWS ODF (OpenShift Data Foundation) deployment natively supports RWX?
openshift-storage.cephfs.csi.ceph.com
CephFS, provided by OpenShift Data Foundation, supports ReadWriteMany (RWX) access modes, unlike standard AWS EBS CSI (which is RWO).
The EX280 flashcard bank covers all 7 official blueprint domains published by Red Hat. Cards are distributed proportionally, so domains with higher exam weight have more cards.
Domain Coverage
Security And SCC
Troubleshooting And Diagnostics
User And RBAC Management
Cluster Installation And Management
Networking And Network Policies
Application Deployment And Lifecycle
Storage And Persistent Volumes
Both flashcards and practice questions are evidence-based study tools. The difference is in what they train:
Flashcards — concept retention
Best for memorising definitions, acronyms, protocol behaviours, command syntax, and conceptual distinctions. Use flashcards to build the foundational vocabulary that EX280 questions assume you know.
Best in: weeks 1–3
Practice tests — application
Best for applying concepts to realistic scenarios, eliminating distractors, and building exam stamina.EX280 questions test scenario reasoning — not just recall — so practice tests are essential.
Best in: weeks 3–6
The most effective EX280 study plan combines both: use flashcards for the first 2–3 weeks to build conceptual foundations, then shift to practice tests and mock exams in the final 2–3 weeks to apply and benchmark that knowledge. Most candidates who pass on their first attempt use both tools.
Yes. Courseiva provides free EX280 flashcards across all official exam domains. Every card includes the correct answer and a full explanation of why it is right and why the distractors are wrong. The platform also includes topic-based practice, mock exams, and readiness tracking — no account required.
Courseiva has 509+ original EX280 flashcards across all 7 exam blueprint domains. New cards are added regularly as the question bank grows. All cards are written by certified engineers against the official Red Hat exam objectives.
Courseiva flashcards are purpose-built for IT certification exams. Unlike generic flashcard platforms where content quality varies, every Courseiva card is mapped to the official EX280 exam blueprint, written by engineers who hold the certification, and includes a full explanation of the correct answer and why the distractors are wrong. This explanation quality is what separates genuine learning from rote memorisation.
Courseiva is a web platform — an internet connection is required. For offline study, we recommend creating free Courseiva account, using the platform in your browser, and using your device's offline capabilities if your browser supports offline web apps.
Save your results, see which domains need more work, and get spaced repetition recommendations — all free.
Sign Up FreeFree forever · Every certification included