20+ practice questions focused on Networking And Network Policies — one of the most tested topics on the Red Hat Certified OpenShift Administrator (EX280, OpenShift Container Platform 4.14+) (EX280) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Networking And Network Policies PracticeAn OVN-Kubernetes clustered environment requires configuring egress IP functionality for a specific namespace so that all outgoing traffic from pods in that namespace appears to originate from a designated external IP address. Which custom resource must be configured?
Explanation: The EgressIP custom resource is the correct answer because in OVN-Kubernetes, egress IP functionality is configured by creating an EgressIP object that specifies the desired external IP address(es). This resource is then associated with one or more namespaces via namespace labels or annotations, causing all outgoing traffic from pods in those namespaces to be SNAT'd to the designated egress IP. The EgressIP resource is specific to the OVN-Kubernetes CNI and is the standard way to achieve this behavior in OpenShift.
An administrator needs to create a Service of type ClusterIP that exposes an application running on port 8080 inside the container, mapping it to port 80 on the Service. Which command should the administrator use?
Explanation: The oc expose service or oc create service command correctly maps the targetPort inside the container to the service port using the syntax --port=80 --target-port=8080.
An OpenShift administrator needs to expose an internal web application securely using a Route that terminates TLS at the router. Which Route type and configuration requires the administrator to provide the certificate, private key, and CA certificate?
Explanation: For an Edge TLS termination Route, the router terminates TLS, and the administrator must provide the certificate, private key, and CA certificate in the Route specification. The router decrypts incoming traffic and forwards plain HTTP to the backend pods. This matches the requirement of terminating TLS at the router and providing the certificate materials.
An OpenShift administrator needs to restrict access so that pods in namespace 'dev' cannot initiate any outbound connections to pods in namespace 'secure-db'. Which resource should be created in namespace 'secure-db' to achieve this?
Explanation: To prevent pods in namespace 'dev' from initiating connections to pods in namespace 'secure-db', the administrator should create a NetworkPolicy in namespace 'secure-db' that selects the target pods and has an empty ingress rule set (i.e., no allowed ingress). In OpenShift, NetworkPolicies are namespace-scoped and apply to pods in that namespace; an empty ingress rule denies all inbound traffic to the selected pods, effectively blocking connections from 'dev'.
A cluster uses OVN-Kubernetes as its CNI network provider. An administrator needs to inspect the logical switches and routers created by OVN within a node. Which command-line tool inside the ovn-node pod should be used?
Explanation: ovn-nbctl is the command-line utility that talks to the OVN Northbound database, which holds the logical switch and logical router definitions. Inspecting logical switches and routers created by OVN-Kubernetes requires querying that northbound database, so ovn-nbctl is the correct tool. It is available inside the ovn-node pod where OVN components run.
+15 more Networking And Network Policies questions available
Practice all Networking And Network Policies questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Networking And Network Policies. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Networking And Network Policies questions on the EX280 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Networking And Network Policies is tested as part of the Red Hat Certified OpenShift Administrator (EX280, OpenShift Container Platform 4.14+) (EX280) blueprint. Practicing with targeted Networking And Network Policies questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free EX280 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Networking And Network Policies is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Networking And Network Policies practice session with instant scoring and detailed explanations.
Start Networking And Network Policies Practice →