EX280 Cluster Installation And Management Practice Test 4 — 15 Questions

Question 1

An administrator needs to update the global pull secret for an OpenShift 4.14 cluster so that nodes can pull images from a new authenticated private registry. Which resource stores the global pull secret?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A Secret named 'pull-secret' in the 'openshift-config' namespace.. The global pull secret is stored in a Secret named 'pull-secret' in the 'openshift-config' namespace.

Answer

The MachineConfigPool resource named 'worker'.

Answer

The ClusterVersion custom resource spec field 'pullSecret'.

Answer

A ConfigMap named 'global-pull-registry' in 'kube-system'.

Question 2

An administrator is troubleshooting an Operator installed via OperatorHub whose pods are failing to pull images because the Operator's subscription namespace lacks access to the global pull secret. How can the administrator configure OLM to use a custom pull secret for an Operator in a specific namespace?

Accepted Answer

Add the image pull secret to the ServiceAccount used by the Operator deployment in the target namespace.. Administrators can link a pull secret to the ServiceAccount used by the Operator's CSV or patch the operator's deployment/subscription depending on OLM version, or add the pull secret to the default ServiceAccount in that namespace.

Answer

Modify the global ClusterVersion resource with the namespace-specific pull secret.

Answer

Edit the CatalogSource resource to inject credentials into the CSV.

Answer

Annotate the OperatorGroup with 'olm.openshift.io/pull-secret=true'.

Question 3

Which component in OpenShift 4.14 coordinates the creation of certificates for cluster components and worker nodes?

Accepted Answer

Kubernetes CSR controller / OpenShift PKI operators. The Certificate Signing Request (CSR) controller and the Machine Config Operator / cluster-kube-apiserver-operator handle internal PKI and certificate issuance.

Answer

Machine API Operator

Answer

Cluster Autoscaler

Answer

Operator Lifecycle Manager (OLM)

Question 4

An administrator wants to check the status of all Certificate Signing Requests (CSRs) in an OpenShift 4.14 cluster, specifically looking for pending node certificates. Which command should be used?

Accepted Answer

oc get csr. The 'oc get csr' command lists all certificate signing requests, allowing administrators to approve pending node bootstrapping certificates if necessary.

Answer

oc adm certificate-status

Answer

oc describe clusteroperator pkcs

Answer

oc get certificates --all-namespaces

Question 5

An administrator has successfully updated the global pull secret in openshift-config/pull-secret. How does the Machine Config Operator propagate this new pull secret to all existing worker nodes in the cluster?

Accepted Answer

The MCO automatically detects the secret change, generates a new rendered MachineConfig, and rolls out the update to nodes.. When the global pull secret is updated in openshift-config, the MCO automatically detects the change, renders a new MachineConfig, and initiates a rolling update of the nodes to apply the new pull secret via Ignition.

Answer

Pull secrets cannot be updated on existing nodes; nodes must be destroyed and recreated.

Answer

The Cluster Version Operator requires a manual cluster reboot command to push secrets.

Answer

The administrator must manually SSH into each worker node and run 'oc-update-pull-secret'.

Question 6

An administrator is preparing to perform maintenance on worker nodes in an OpenShift 4.14 cluster. Which TWO commands or actions are part of the standard workflow to safely prepare a node for maintenance? (Choose TWO)

Accepted Answer

Run 'oc adm cordon <node-name>' to mark the node as unschedulable.. To prepare a node for maintenance, the administrator must cordon it to prevent scheduling and drain it to evict workloads gracefully.

Answer

Run 'oc delete node <node-name> --force' immediately before stopping services.

Answer

Stop the kubelet service directly via systemctl without cordoning.

Answer

Scale the MachineConfigPool replicas to zero.

Question 7

An administrator wants to customize worker node behavior in an OpenShift 4.14 cluster using the Machine Config Operator. Which THREE custom resources are natively provided and managed by the MCO for node customization? (Choose THREE)

Accepted Answer

MachineConfig. The MCO manages MachineConfig, KubeletConfig, and ContainerRuntimeConfig custom resources to configure nodes.

Answer

ClusterVersion

Answer

OperatorGroup

Question 8

An administrator is troubleshooting an Operator installation issue in OpenShift 4.14. Which TWO resources or logs should the administrator examine to diagnose OLM operator subscription and CSV issues? (Choose TWO)

Accepted Answer

Inspect the ClusterServiceVersion (CSV) status and conditions.. To troubleshoot OLM operators, checking the Subscription status and the ClusterServiceVersion (CSV) status provides the necessary error details.

Answer

Review the MachineConfigPool status in openshift-machine-api.

Answer

Check the cluster-wide node storage provisioning logs.

Answer

Review the ClusterVersion resource status conditions.

Question 9

Which TWO commands can an administrator use to check the overall status or health of core OpenShift 4.14 cluster operators? (Choose TWO)

Accepted Answer

oc get clusteroperators. Administrators use 'oc get clusteroperators' and 'oc get clusterversion' to check core cluster operator health and upgrade status.

Answer

oc get machinesets

Answer

oc get machineconfigpools

Answer

oc get csv --all-namespaces

Question 10

An administrator needs to troubleshoot an upgrade failure in OpenShift 4.14. Which TWO actions or diagnostic steps should the administrator take? (Choose TWO)

Accepted Answer

Inspect any cluster operators reporting 'Degraded=True' or 'Progressing=True'.. To troubleshoot upgrades, administrators should check clusterversion status and inspect degraded cluster operators.

Answer

Reboot the entire cluster control plane via physical power cycles.

Answer

Delete all pods in the openshift-cluster-version namespace to force a clean restart.

Answer

Scale down all OLM Operator subscriptions to zero.

Question 11

An administrator is configuring automated node remediation and scaling in OpenShift 4.14. Which THREE objects or custom resources are involved in machine management, autoscaling, and health checking? (Choose THREE)

Accepted Answer

MachineSet. Machine, ClusterAutoscaler, and MachineHealthCheck are core resources involved in machine lifecycle and health management.

Answer

ClusterVersion

Answer

OperatorGroup

Question 12

An administrator wants to verify node configuration application status. Which TWO indicators show that a MachineConfigPool has successfully finished applying a new MachineConfig? (Choose TWO)

Accepted Answer

The 'UpdatedMachineCount' equals the 'MachineCount' in the pool status.. A successfully updated MachineConfigPool will show Updating=False and Updated=<total-nodes> matching machine counts.

Answer

The 'ClusterVersion' status reads 'Updating'.

Answer

The pool status condition 'Paused' is set to True.

Answer

The 'DegradedMachineCount' is greater than zero.

Question 13

Which TWO actions can an administrator perform using the 'oc adm' command set related to cluster management? (Choose TWO)

Accepted Answer

Initiate and manage cluster upgrades.. The 'oc adm' command group provides administrative utilities such as cordoning nodes and managing cluster upgrades.

Answer

Write custom container Dockerfiles on cluster nodes.

Answer

Manage user project request limits directly.

Answer

Create application deployments directly without YAML files.

Question 14

An administrator is configuring Operator subscriptions in OpenShift 4.14 using OLM. Which THREE parameters can be configured within a Subscription custom resource? (Choose THREE)

Accepted Answer

name. Subscriptions support setting the channel, package name, catalogSource, and installPlanApproval.

Answer

kubeletConfigSelector

Answer

machineConfigPoolSelector

Question 15

An administrator is configuring a disconnected (air-gapped) OpenShift 4.14 cluster installation. Which THREE components or resources are critical for successfully managing container image mirroring and catalog sources in this environment? (Choose THREE)

Accepted Answer

ImageContentSourcePolicy (or ImageTagMirrorSet). ImageContentSourcePolicy/ImageTagMirrorSet, mirror registry, and CatalogSource are essential for disconnected installations.

Answer

OperatorGroup namespace restriction rules

Answer

MachineHealthCheck remediation timeout settings