EX280 Multiple Select — 40 Questions

Question 1

Which TWO of the following can be used to troubleshoot a failing deployment?

Accepted Answer

oc describe deployment. Describing the deployment and checking the pod logs are standard troubleshooting steps.

Answer

oc rollout undo

Answer

oc delete project

Answer

oc start-build

Question 2

Which TWO fields are mandatory when defining a standard Kubernetes NetworkPolicy object? (Choose TWO)

Accepted Answer

metadata. A NetworkPolicy requires 'apiVersion', 'kind', 'metadata', and 'spec' (with podSelector). From the specific choices, spec.podSelector and metadata are essential.

Answer

spec.ingress

Answer

spec.egress.to.ipBlock

Answer

metadata.namespace

Question 3

An administrator is configuring a DeploymentConfig in OpenShift and wants to set up automated triggers for new rollouts. Which TWO trigger types are natively supported in a DeploymentConfig spec? (Choose two.)

Accepted Answer

ConfigChange. DeploymentConfigs support ConfigChange (triggering when the DeploymentConfig template changes) and ImageChange (triggering when a referenced ImageStream tag updates).

Answer

PeriodicTrigger

Answer

WebhookTrigger

Answer

GitTrigger

Question 4

Which THREE of the following mechanisms can be used to automatically trigger a new build in an OpenShift BuildConfig? (Choose three.)

Accepted Answer

ImageChange trigger. BuildConfigs support webhook triggers (GitHub, Generic), image change triggers (when a base image updates), and configuration change triggers (when the BuildConfig itself changes).

Answer

Route health-check trigger

Answer

CronJob schedule trigger

Question 5

Which THREE components are part of a Kustomize configuration?

Accepted Answer

kustomization.yaml. Kustomize uses resources, patches, and a kustomization file to manage deployment overrides.

Answer

BuildConfigs

Answer

Helm Charts

Question 6

An administrator needs to identify worker nodes that require attention during an upgrade or maintenance. Which TWO conditions or states on a node object indicate potential issues or special maintenance states? (Choose TWO)

Accepted Answer

SchedulingDisabled. SchedulingDisabled (cordoned) and NotReady indicate maintenance or health issues on nodes.

Answer

Running=Normal

Answer

Active=True

Answer

Schedulable=True

Question 7

When troubleshooting network policies or container connectivity in an OVN-Kubernetes environment, which THREE tools or logs are useful for diagnosing packet drops and flow issues? (Choose THREE)

Accepted Answer

Querying the OVN southbound database using ovn-sbctl. OVN-Kubernetes logs, node ovn-controller logs, and ovn-sbctl are key diagnostic tools.

Answer

Running systemctl restart firewalld on all worker nodes simultaneously

Answer

Editing the master /etc/hosts file to add custom pod IP mappings

Question 8

Which TWO components are core parts of the OpenShift DNS architecture for cluster resolution? (Choose TWO)

Accepted Answer

CoreDNS. CoreDNS is deployed by the Cluster DNS Operator to provide internal name resolution for pods and services.

Answer

BIND9

Answer

HAProxy DNS module

Answer

Keepalived DNS plugin

Question 9

Which TWO of the following are valid Service types supported natively in OpenShift? (Choose TWO)

Accepted Answer

ClusterIP. ClusterIP, NodePort, and LoadBalancer are standard Kubernetes/OpenShift service types. (ExternalName is also valid, Route is not a service type).

Answer

VirtualIP

Answer

IngressObject

Answer

Route

Question 10

Which THREE commands can an administrator use to inspect existing routes in an OpenShift cluster? (Choose THREE)

Accepted Answer

oc get routes. oc get routes, oc describe route, and oc get route are standard commands. (oc explain route is also valid for documentation). Let's select get, describe, and explain.

Answer

oc top route

Answer

oc logs route/<route-name>

Question 11

An administrator wants to prevent automatic updates for an Operator installed via OLM while still allowing manual installation of new versions when desired. Which TWO actions or configurations should be performed? (Choose TWO)

Accepted Answer

Approve generated InstallPlans selectively using 'oc patch installplan' or via the web console when an update is desired.. To prevent automatic updates, set installPlanApproval to Manual and approve install plans manually when ready.

Answer

Scale the OLM operator pods to zero.

Answer

Delete the CatalogSource resource entirely.

Answer

Annotate the Subscription with 'olm.openshift.io/block-updates=true'.

Question 12

Which TWO of the following are valid OpenShift Service types? (Choose TWO)

Accepted Answer

ClusterIP. Kubernetes and OpenShift support several standard service types, among which ClusterIP and NodePort are core native types.

Answer

NetworkPort

Answer

RouteIP

Answer

ContainerPort

Question 13

An administrator wants to verify node configuration application status. Which TWO indicators show that a MachineConfigPool has successfully finished applying a new MachineConfig? (Choose TWO)

Accepted Answer

The 'UpdatedMachineCount' equals the 'MachineCount' in the pool status.. A successfully updated MachineConfigPool will show Updating=False and Updated=<total-nodes> matching machine counts.

Answer

The 'ClusterVersion' status reads 'Updating'.

Answer

The pool status condition 'Paused' is set to True.

Answer

The 'DegradedMachineCount' is greater than zero.

Question 14

Which THREE actions can be performed when managing Route objects in OpenShift? (Choose THREE)

Accepted Answer

Specifying TLS termination as edge, passthrough, or reencrypt. Routes support custom hostnames, path-based routing, and multiple TLS termination modes.

Answer

Attaching a container storage volume directly inside the Route spec

Answer

Allocating a direct BGP peering session from the Route object

Question 15

An administrator is securing routes in an OpenShift cluster. Which THREE TLS termination types are supported natively by OpenShift Routes? (Choose THREE)

Accepted Answer

Passthrough. OpenShift Routes support edge, re-encrypt, and passthrough TLS termination types.

Answer

Proxy

Answer

FullMesh

Question 16

Which THREE restrictions or behaviors are enforced by the default restricted-v2 Security Context Constraint in OpenShift Container Platform?

Accepted Answer

Containers are prohibited from running with privileged mode enabled.. The restricted-v2 SCC enforces strict security best practices, including disallowing running as root, forbidding privileged containers, and requiring the drop of all capabilities except NET_BIND_SERVICE.

Answer

Containers are allowed to mount host network, host IPC, and host PID namespaces.

Answer

Pods are automatically assigned a random UID from the namespace's pre-allocated UID range.

Question 17

Which THREE parameters are commonly found in the SCC 'spec' section?

Accepted Answer

seLinuxContext. SCCs control security via fields like 'seLinuxContext', 'runAsUser', and 'capabilities'.

Answer

namespaceSelector

Answer

imagePullPolicy

Question 18

An administrator wants to check cluster networking and SDN communication. Which TWO commands can be used to gather network-related diagnostic information? (Choose TWO)

Accepted Answer

oc get clusteroperator network. oc get clusteroperator network and inspecting OVN/SDN daemonset pod logs are key network troubleshooting steps.

Answer

oc get routes

Answer

oc adm top volume

Answer

oc describe pvc

Question 19

An OpenShift cluster upgrade has failed because a MachineConfigPool is degraded. Which THREE actions or commands can an administrator perform to diagnose the root cause of the MachineConfigPool degradation? (Choose THREE)

Accepted Answer

oc logs -n openshift-machine-config-operator daemonset/machine-config-daemon. Describing the MCP, checking MCD pod logs on nodes, and inspecting rendered machine configs help diagnose node configuration failures.

Answer

oc scale deployment/cluster-version-operator --replicas=3

Answer

oc adm upgrade cancel

Question 20

An administrator is investigating pod crash loops in a namespace. Which TWO commands are most useful for gathering initial diagnostic data about the crashing pods? (Choose TWO)

Accepted Answer

oc describe pod <pod-name>. oc logs --previous and oc describe pod are the standard foundational commands for inspecting exit codes, termination reasons, and prior log output of crashing pods.

Answer

oc adm must-gather

Answer

oc rsh <pod-name>

Answer

oc debug node/<node-name>