EX280 Practice Test 4 — 10 Questions

Question 1

Which tool would you use to package an application including its dependencies and configuration for easy distribution in OpenShift?

Accepted Answer

Helm. Helm is the standard package manager for Kubernetes and OpenShift applications.

Answer

oc build

Answer

Kustomize

Answer

S2I

Question 2

You need to ensure that your application deployment always maintains at least 80% of its desired pod count during a rolling update. Which strategy parameter should you configure?

Accepted Answer

maxUnavailable: 20%. The maxUnavailable parameter defines the maximum number of pods that can be unavailable during the update process. Setting this to 20% ensures 80% availability.

Answer

minReadySeconds: 20

Answer

maxSurge: 20%

Answer

rollingUpdatePeriod: 20%

Question 3

What is the result of using a 'Recreate' strategy during a deployment?

Accepted Answer

Temporary service outage. The Recreate strategy terminates all existing instances before creating any new ones, resulting in a temporary service outage.

Answer

Zero downtime deployment

Answer

Rolling update

Answer

Instant switch

Question 4

An administrator notices that pods on different worker nodes cannot communicate with each other. Upon checking the cluster network operator, it appears the MTU settings between the underlying physical network and the cluster overlay network mismatch. Which OpenShift command checks the cluster network operator status?

Accepted Answer

oc get clusteroperator network. The ClusterNetworkOperator status can be verified by inspecting the operator resource cluster/network.

Answer

oc get cni cluster

Answer

oc describe networkconfig

Answer

oc get nodes --show-mtu

Question 5

An OpenShift administrator needs to inspect how OVN-Kubernetes handles network flows and packet drops on a specific node. Which debugging utility installed in the OVN node container is most effective for viewing OpenFlow rules?

Accepted Answer

ovs-ofctl. ovs-ofctl is used to inspect and manipulate OpenFlow rules in Open vSwitch bridges, which underpin OVN-Kubernetes data paths.

Answer

nmcli connection show

Answer

ethtool -S

Answer

ovn-trace

Question 6

When configuring a custom build strategy, where do you define the Dockerfile to use?

Accepted Answer

In the strategy block of the BuildConfig. In the BuildConfig, under the 'strategy' block, you can specify the Dockerfile context or explicitly define the Dockerfile source.

Answer

In the DeploymentConfig

Answer

In the Build object

Answer

In the ImageStream

Question 7

You have a build that fails because it requires access to a private repository. What is the correct way to provide credentials to the build?

Accepted Answer

Associate a secret with the BuildConfig. You can add a Secret to the BuildConfig that contains the credentials for the private repository.

Answer

Hardcode credentials in the Dockerfile

Answer

Use an environment variable in the deployment

Answer

Mount a ConfigMap

Question 8

An administrator needs to configure a custom default certificate for all routes created in the cluster without specifying a certificate on every individual Route object. Where should this wildcard certificate be configured?

Accepted Answer

In the IngressController resource named 'default' in openshift-ingress-operator. The default certificate for routes is configured in the IngressController custom resource under the 'defaultCertificate' spec.

Answer

In a ConfigMap named 'router-certs' in the default namespace

Answer

In the apiserver.config.openshift.io cluster object

Answer

In the DNS cluster operator configuration

Question 9

Which THREE components are part of a Kustomize configuration?

Accepted Answer

kustomization.yaml. Kustomize uses resources, patches, and a kustomization file to manage deployment overrides.

Answer

BuildConfigs

Answer

Helm Charts

Question 10

An administrator wants to expose a Deployment via a NodePort service. What is the default port range allocated for NodePort services in OpenShift if not explicitly configured otherwise?

Accepted Answer

30000-32767. Kubernetes and OpenShift allocate NodePort services within the standard port range of 30000-32767.

Answer

1024-65535

Answer

80-443

Answer

8000-9000