EX280 Timed Practice Test 1 — 10 Questions

Question 1

An administrator needs to deploy a Helm chart into an OpenShift cluster while overriding specific chart values using a local YAML file. Which Helm CLI command should be executed?

Accepted Answer

helm install my-release my-chart --values overrides.yaml. The helm install command with the -f or --values flag allows supplying a YAML file to override default chart values.

Answer

helm push my-chart --override overrides.yaml

Answer

helm deploy my-release my-chart --values overrides.yaml

Answer

helm apply -f overrides.yaml my-chart

Question 2

A cluster uses OVN-Kubernetes as its CNI network provider. An administrator needs to inspect the logical switches and routers created by OVN within a node. Which command-line tool inside the ovn-node pod should be used?

Accepted Answer

ovn-nbctl. ovn-nbctl is the Open Virtual Network Northbound CLI utility used to inspect logical entities like switches, routers, and ports.

Answer

ip route show

Answer

iptables-save

Answer

ovs-vsctl

Question 3

An administrator needs to view the rollout history of a DeploymentConfig named web-frontend. Which command accomplishes this?

Accepted Answer

oc rollout history dc/web-frontend. The oc rollout history command displays the revision history for a Deployment or DeploymentConfig.

Answer

oc describe dc/web-frontend

Answer

oc get revisions dc/web-frontend

Answer

oc log rollout dc/web-frontend

Question 4

You need to deploy a Node.js application from a Git repository using Source-to-Image (S2I) on OpenShift 4.14, and you want to ensure the build triggers automatically whenever a new image is pushed to the dependent base ImageStream. Which BuildConfig strategy and configuration element achieves this?

Accepted Answer

Configure a Source build with an ImageChange trigger on the input ImageStreamTag.. Using the source strategy in a BuildConfig along with triggers of type ImageChange allows the build to automatically run when the referenced ImageStreamTag changes.

Answer

Configure a Docker build with a ConfigChange trigger on the DeploymentConfig.

Answer

Configure a Pipeline build referencing a Tekton pipeline with manual execution parameters.

Answer

Configure a Custom build with a GitHub webhook trigger referencing the source repository.

Question 5

Which TWO of the following can be used to troubleshoot a failing deployment?

Accepted Answer

oc describe deployment. Describing the deployment and checking the pod logs are standard troubleshooting steps.

Answer

oc rollout undo

Answer

oc delete project

Answer

oc start-build

Question 6

An administrator wants to configure a NetworkPolicy that allows incoming traffic only from pods with the label 'role=frontend' residing in any namespace, provided those namespaces have the label 'environment=production'. How should the namespaceSelector and podSelector be combined?

Accepted Answer

In the same ingress 'from' array item, combining namespaceSelector and podSelector. A single ingress rule in a NetworkPolicy can contain both a namespaceSelector and a podSelector within the same 'from' array element to target specific pods in specific namespaces.

Answer

By referencing an external ClusterRole binding with label selectors

Answer

Using a peerSelector object that nests both labels

Answer

In separate ingress rules, where one rule has namespaceSelector and another has podSelector

Question 7

An administrator needs to configure custom container runtime parameters (such as the maximum pod log size or maximum number of processes per container) across all worker nodes in an OpenShift 4.14 cluster. Which custom resource should the administrator create?

Accepted Answer

ContainerRuntimeConfig. Container runtime settings such as max log size and storage options are managed using the ContainerRuntimeConfig custom resource in OpenShift.

Answer

MachineHealthCheck

Answer

KubeletConfig

Answer

NodeNetworkConfigurationPolicy

Question 8

An administrator wants to view the public URL assigned to an existing Route named 'webapp'. Which oc command is best suited to extract only the host URL value?

Accepted Answer

oc get route webapp -o jsonpath='{.spec.host}'. Using jsonpath with the oc get command allows extracting specific fields like the host spec of a route directly.

Answer

oc get route webapp --show-url

Answer

oc describe route webapp --url

Answer

oc extract route/webapp --field=host

Question 9

What is the primary function of the Machine Config Operator (MCO) in OpenShift 4.14?

Accepted Answer

Managing operating system configurations, file system changes, and software updates for cluster nodes.. The MCO manages and applies configuration changes to the operating system on control plane and worker nodes, such as updates to system files, certs, and kernel parameters.

Answer

Handling external DNS records and cluster ingress routing.

Answer

Provisioning cloud provider virtual machines for cluster scaling.

Answer

Managing container image registries and secure image signing.

Question 10

An administrator needs to modify the timeout values for the default OpenShift Ingress Controller (Router). Where should this change be applied?

Accepted Answer

Edit the ingresscontroller instance named 'default' in the 'openshift-ingress-operator' namespace.. Ingress controller parameters such as timeouts are configured by editing the IngressController custom resource in the 'openshift-ingress-controller' namespace.

Answer

Edit the proxy resource named 'cluster'.

Answer

Edit the endpoints resource in the 'openshift-ingress' namespace.

Answer

Modify the kube-apiserver configmap.