EX280 Practice Test 17 — 15 Questions

Question 1

A developer wants to inspect the generated Kubernetes manifests from a Helm chart without actually installing the chart into the OpenShift cluster. Which Helm command should be used?

Accepted Answer

helm template my-release my-chart. The helm template command renders the chart locally and outputs the resulting manifest YAML to stdout without installing it.

Answer

helm dry-run my-release my-chart

Answer

helm show chart my-chart

Answer

helm inspect values my-chart

Question 2

When managing ImageStreams in OpenShift, which TWO tasks can an administrator perform using oc commands? (Choose two.)

Accepted Answer

Creating an alias or tag pointing one ImageStream tag to another using oc tag. Administrators can import image tags from external registries using oc import-image and tag images using oc tag.

Answer

Running unit tests against container image layers using oc test-image

Answer

Compiling raw source code into an executable binary using oc tag

Answer

Directly modifying kernel parameters on worker nodes via oc image

Question 3

During an S2I build, an administrator needs to pass sensitive build arguments, such as subscription keys, without hardcoding them into the BuildConfig or exposing them in the final image history. How should this be handled?

Accepted Answer

Using build secrets mounted via the source secret or build strategy configuration. Secret mounting during builds allows referencing Kubernetes Secrets as build secrets that are available during the build process but not persisted in the output image layers.

Answer

Storing them in an ImageStream annotation

Answer

Defining them as plain environment variables in the BuildConfig spec

Answer

Injecting them via the Route host header

Question 4

Which THREE actions can be performed using the oc rollout subcommand in OpenShift? (Choose three.)

Accepted Answer

Pausing a rollout to make multiple configuration updates. oc rollout supports history, undo, pause, resume, and status. It does not support build or scale directly as primary subcommands.

Answer

Triggering a direct source build from a local directory

Answer

Scaling the number of replicas up or down

Question 5

How do you view the history of deployments for a DeploymentConfig?

Accepted Answer

oc rollout history. The 'oc rollout history' command lists the revisions of a deployment.

Answer

oc show history

Answer

oc describe dc

Answer

oc get history

Question 6

A developer has deployed a Helm chart in OpenShift and needs to list all currently installed Helm releases in the current namespace. Which command should be used?

Accepted Answer

helm list. The helm list command shows all active Helm releases in the current namespace.

Answer

helm get releases

Answer

helm status

Answer

helm search installed

Question 7

A DeploymentConfig in OpenShift has a Rolling strategy defined. Which parameter in the strategy configuration controls the maximum number of pods that can be created above the desired replica count during the update?

Accepted Answer

maxSurge. maxSurge controls how many pods can be scheduled above the desired number of pods during a rolling update.

Answer

interval

Answer

updatePeriodSeconds

Answer

maxUnavailable

Question 8

An administrator is troubleshooting a failed OpenShift build. Which THREE resources or logs should the administrator check to diagnose the failure? (Choose three.)

Accepted Answer

The logs of the specific build pod using oc logs build/. To diagnose build failures, checking the BuildConfig definition, the specific Build object logs via oc logs build/, and the events in the namespace provides comprehensive diagnostic data.

Answer

The cluster-wide storage class definitions

Answer

The default OAuth client secret

Question 9

Which THREE of the following are valid build strategies supported by OpenShift BuildConfigs? (Choose three.)

Accepted Answer

Custom. OpenShift supports Source (S2I), Docker, Custom, and Pipeline build strategies.

Answer

Jenkinsfile

Answer

HelmBuild

Question 10

Which THREE pieces of data can an ImageStream reference?

Accepted Answer

Internal registry image. An ImageStream can point to an external registry image, a local internal registry image, or a specific tag.

Answer

Git repository

Answer

DeploymentConfig

Question 11

An administrator installed an Operator via OperatorHub and selected a specific update channel. Later, the administrator wants to switch the Subscription to a different update channel. How should this be performed?

Accepted Answer

Edit the Subscription custom resource and modify the 'spec.channel' field to the new channel.. To change the channel, the administrator edits the Subscription custom resource and updates the 'spec.channel' field to the new channel name.

Answer

Delete the Operator's CSV and reinstall the Operator from scratch via the CLI.

Answer

Modify the OperatorGroup target namespace to force a channel renegotiation.

Answer

Patch the ClusterServiceVersion directly with the new channel identifier.

Question 12

An administrator needs to roll back a Deployment in OpenShift to a specific previous revision because the latest update introduced a critical database connection bug. Which command identifies the available revisions and their associated change causes before executing the rollback?

Accepted Answer

oc rollout history deployment/<deployment-name>. The 'oc rollout history' command lists the deployment revisions and their associated change causes.

Answer

oc get replicasets --selector=app=my-app

Answer

oc get deployment/<deployment-name> -o yaml

Answer

oc describe deploymentconfig <deployment-config-name>

Question 13

You need to update an application without downtime. Which deployment strategy is most appropriate?

Accepted Answer

Rolling. The Rolling strategy replaces pods incrementally, ensuring capacity is maintained throughout.

Answer

Canary

Answer

Blue-Green

Answer

Recreate

Question 14

An administrator needs to perform a graceful maintenance reboot on a worker node named worker-01 in an OpenShift 4.14 cluster without causing application downtime for stateless deployments. Which combination of actions should the administrator perform first?

Accepted Answer

Run 'oc adm cordon worker-01' followed by 'oc adm drain worker-01 --delete-emptydir-data --ignore-daemonsets'.. To safely maintain a worker node, the administrator must first cordon the node to prevent new pod scheduling and then drain it to gracefully evict existing workloads with proper pod disruption budgets.

Answer

Apply a MachineConfig to the worker MachineConfigPool pausing the updates, then reboot the node.

Answer

Stop the kubelet service on worker-01 via systemctl and reboot the underlying operating system.

Answer

Run 'oc delete node worker-01' directly to force the cluster control plane to automatically reschedule workloads.

Question 15

A developer has created a Kustomization file that applies a namespace prefix and some patches to base Kubernetes manifests. How can the developer apply these manifests to an OpenShift cluster using standard oc tooling without installing standalone Kustomize?

Accepted Answer

oc apply -k ./directory. The oc apply command includes built-in support for Kustomize via the -k flag, which processes a directory containing a kustomization.yaml file.

Answer

oc create -f kustomization.yaml

Answer

oc run -k ./directory

Answer

oc kustomize apply ./directory