EX280 Security And SCC Practice Question
An application pod needs to run with a specific user ID (UID 10005000) that falls outside the restricted-v2 SCC default allocated range for the namespace. The administrator decides to create a custom SCC. Which SCC security context strategy parameter must be adjusted to allow this specific UID?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
runAsUser with type: RunAsAny or specifying the UID range in uidRanges.
The runAsUser strategy in an SCC determines how UIDs are assigned. Setting it to MustRunAsRange with an expanded range or RunAsAny (depending on cluster security posture) allows specific UIDs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
supplementalGroups with type: RunAsAny and fsGroup set to 10005000.
Why it's wrong here
fsGroup and supplementalGroups do not control the primary container execution UID.
- ✗
seLinuxContext with type: MustRunAs and level set to s0:c100,c200.
Why it's wrong here
SELinux context settings control MLS/MCS security labels, not user IDs.
- ✓
runAsUser with type: RunAsAny or specifying the UID range in uidRanges.
Why this is correct
Configuring runAsUser to RunAsAny or including the target UID inside the uidRanges of a MustRunAsRange strategy permits the pod to run with that UID.
- ✗
runAsUser with type: MustRunAs and uidRange or uid settings covering the required value.
Why it's wrong here
MustRunAs requires a specific single UID unless configured properly, but MustRunAsRange is typically used for ranges. Let's look closer: RunAsAny or setting uid range is correct. Wait, the exact field in SCC is runAsUser.type set to MustRunAsRange or MustRunAs with uid.
About these practice questions
One of 509 original EX280 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Red Hat exam blueprint
This EX280 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX280 exam.