75 of 80 questions · Page 1/2 · Cluster Installation And Management · Answers revealed
Which component in OpenShift 4.14 manages the creation and deletion of compute machines (VMs or physical servers) on cloud providers or bare metal?
The Machine API Operator provisions and manages compute nodes via the Machine API.
Why this answer
The Machine API Operator manages the underlying compute infrastructure using Custom Resources such as Machines and MachineSets.
Which component in OpenShift 4.14 is responsible for orchestrating the upgrade of the entire cluster from one minor version to another?
The CVO is the core operator responsible for driving OpenShift cluster installation and version updates.
Why this answer
The Cluster Version Operator (CVO) manages the core components of OpenShift and orchestrates cluster upgrades based on the requested channel and version.
Which TWO objects are used by OLM to manage Operator catalogs and sources of software in OpenShift 4.14? (Choose TWO)
OperatorGroup defines namespace scoping for operators.
Why this answer
CatalogSource and OperatorGroup are key OLM components for catalog management and scoping.
An administrator is troubleshooting a custom MachineConfig that failed to apply across a worker MachineConfigPool. Which THREE diagnostic steps or resources should the administrator check? (Choose THREE)
Daemon logs show ignition parsing and file write errors on nodes.
Why this answer
To diagnose MachineConfig application failures, check pool status conditions, machine-config-daemon pod logs, and rendered MachineConfigs.
An administrator wants to check the health and availability status of all core OpenShift 4.14 cluster operators (such as authentication, ingress, and dns). Which command should be used?
oc get clusteroperators lists all core platform operators and their health statuses.
Why this answer
The 'oc get clusteroperators' command lists all cluster operators, their availability, progression, and degraded status.
An administrator wants to perform a manual rollback of a MachineConfig change that caused issues on worker nodes. What is the standard way to revert to the previous configuration using the Machine Config Operator?
Deleting the unwanted MachineConfig causes the MCO to re-render the ignition config and revert nodes.
Why this answer
To rollback a MachineConfig, the administrator can delete the erroneous MachineConfig object, and the MCO will automatically revert the nodes to the previous valid configuration.
An administrator is investigating why cluster operator upgrades are failing. Which TWO locations or commands provide detailed diagnostic information about cluster operators? (Choose TWO)
Describe output shows specific error messages and failure conditions for the operator.
Why this answer
To diagnose cluster operators, administrators inspect individual cluster operator status ('oc describe clusteroperator') and check logs of operator pods.
An administrator is troubleshooting an Operator installation issue in OpenShift 4.14. Which TWO resources or logs should the administrator examine to diagnose OLM operator subscription and CSV issues? (Choose TWO)
The CSV resource details whether the operator installed successfully or encountered errors.
Why this answer
To troubleshoot OLM operators, checking the Subscription status and the ClusterServiceVersion (CSV) status provides the necessary error details.
An administrator needs to inspect the current update channel and version of an OpenShift 4.14 cluster. Which command provides this status directly?
oc get clusterversion displays the cluster version state, available updates, and channel.
Why this answer
Running 'oc get clusterversion' displays the cluster version, channel, and overall update availability.
An administrator wants to inspect or modify the OperatorGroup for a namespace in OpenShift 4.14. Which TWO characteristics or settings are defined by an OperatorGroup? (Choose TWO)
OperatorGroups specify whether an operator watches a single namespace, all namespaces, or a select list.
Why this answer
OperatorGroups define the target namespaces where OLM operators can be installed and operated.
An administrator has successfully updated the global pull secret in openshift-config/pull-secret. How does the Machine Config Operator propagate this new pull secret to all existing worker nodes in the cluster?
The MCO watches the global pull secret and automatically triggers node configuration updates when it changes.
Why this answer
When the global pull secret is updated in openshift-config, the MCO automatically detects the change, renders a new MachineConfig, and initiates a rolling update of the nodes to apply the new pull secret via Ignition.
During an upgrade of an OpenShift 4.14 cluster using the Cluster Version Operator (CVO), the upgrade status stalls at a specific component. The administrator wants to check the detailed error messages and reconciling loops of the CVO itself. Where should the administrator look?
The CVO pod in openshift-cluster-version manages cluster upgrades and logs all synchronization errors.
Why this answer
The Cluster Version Operator runs in the openshift-cluster-version namespace. Its logs provide detailed reconciliation status and errors during cluster upgrades.
Which namespace houses the core Cluster Version Operator (CVO) in an OpenShift 4.14 cluster?
openshift-cluster-version is the designated namespace for CVO pods and related resources.
Why this answer
The Cluster Version Operator runs in the openshift-cluster-version namespace.
An administrator is troubleshooting a failed cluster upgrade in OpenShift 4.14. The upgrade channel is set to 'stable-4.14', but the cluster refuses to update to the latest target version. The administrator runs 'oc get clusterversion' and notes that a specific ClusterOperator reports 'Degraded=True'. What is the recommended next step?
Resolving degraded cluster operators is necessary since the CVO prevents upgrades when operators are unhealthy.
Why this answer
Before proceeding with an upgrade, any degraded or failing ClusterOperator must be investigated and resolved because the CVO will block upgrades if core components are not healthy.
What is the primary function of the Machine Config Operator (MCO) in OpenShift 4.14?
The MCO coordinates OS updates, Ignition config generation, and node reboots.
Why this answer
The MCO manages and applies configuration changes to the operating system on control plane and worker nodes, such as updates to system files, certs, and kernel parameters.
An administrator wants to inspect the ignition configuration generated for worker nodes by the Machine Config Operator. Which command or resource should the administrator examine?
Rendered MachineConfigs contain the combined ignition specifications applied to nodes.
Why this answer
Ignition configs are generated and stored inside ControllerConfigs or rendered MachineConfigs managed by the MCO.
An administrator has modified a KubeletConfig resource to adjust the pod eviction thresholds on worker nodes. After applying the change, the administrator observes that some worker nodes are updating while others belonging to a custom worker pool are not. What is the most likely reason?
KubeletConfig objects use selectors to determine which MachineConfigPools to target.
Why this answer
KubeletConfig resources target specific MachineConfigPools using machineConfigPoolSelector labels. If the custom worker pool does not match the selector, it will not receive the configuration.
An administrator is troubleshooting an Operator installed via OperatorHub whose pods are failing to pull images because the Operator's subscription namespace lacks access to the global pull secret. How can the administrator configure OLM to use a custom pull secret for an Operator in a specific namespace?
Kubernetes pods pull images using credentials attached to their ServiceAccount via imagePullSecrets.
Why this answer
Administrators can link a pull secret to the ServiceAccount used by the Operator's CSV or patch the operator's deployment/subscription depending on OLM version, or add the pull secret to the default ServiceAccount in that namespace.
An administrator wants to verify node configuration application status. Which TWO indicators show that a MachineConfigPool has successfully finished applying a new MachineConfig? (Choose TWO)
Equal counts indicate all machines in the pool have received the latest configuration.
Why this answer
A successfully updated MachineConfigPool will show Updating=False and Updated=<total-nodes> matching machine counts.
Which TWO commands or tools can an administrator use to inspect cluster logs or events when troubleshooting node or pod issues? (Choose TWO)
oc logs retrieves container log output.
Why this answer
Administrators use 'oc logs' and 'oc get events' to investigate pod and cluster activities.
Which TWO namespaces are standard system namespaces in OpenShift 4.14 that contain core cluster operators and platform components? (Choose TWO)
Contains the Cluster Version Operator.
Why this answer
openshift-cluster-version and openshift-machine-config-operator are core platform namespaces.
An administrator wants to view the available recommended upgrade paths for an OpenShift 4.14 cluster from the command line. Which command should the administrator run?
Running 'oc adm upgrade' displays the current version, available updates, and recommended target versions.
Why this answer
The 'oc adm upgrade' command displays available updates and recommended upgrade paths for the cluster.
An administrator is configuring automated node remediation and scaling in OpenShift 4.14. Which THREE objects or custom resources are involved in machine management, autoscaling, and health checking? (Choose THREE)
MachineSet manages machine replica sets for compute nodes.
Why this answer
Machine, ClusterAutoscaler, and MachineHealthCheck are core resources involved in machine lifecycle and health management.
An administrator has added a new custom worker MachineConfigPool and wants existing worker nodes to be migrated into this new pool based on specific labels. How does an administrator move a node from the default worker pool to a custom MachineConfigPool?
MachineConfigPools select nodes based on matching node role labels.
Why this answer
To move a node to a custom MachineConfigPool, the administrator must label the node with the role label matching the custom MachineConfigPool (e.g., node-role.kubernetes.io/<pool-name>='').
An administrator wants to prevent automatic updates for an Operator installed via OLM while still allowing manual installation of new versions when desired. Which TWO actions or configurations should be performed? (Choose TWO)
Administrators review and approve pending install plans manually.
Why this answer
To prevent automatic updates, set installPlanApproval to Manual and approve install plans manually when ready.
An administrator needs to modify the SSH key used for debugging worker nodes across an OpenShift 4.14 cluster. Which resource type should the administrator edit or create to apply this change cluster-wide to all worker nodes?
MachineConfig resources are specifically designed by the Machine Config Operator to deliver OS-level settings like SSH keys.
Why this answer
MachineConfig objects allow administrators to manage node-level configuration changes, including injecting authorized SSH keys for the core user.
An administrator is managing cluster machine configurations and needs to understand how Ignition configuration files are processed. Which THREE statements are correct regarding Ignition and the Machine Config Operator in OpenShift 4.14? (Choose THREE)
The daemon applies ignition specifications and manages node reboots.
Why this answer
Ignition provisions nodes on first boot, rendered MachineConfigs combine configs, and the Machine Config Daemon applies them.
An administrator has successfully installed an Operator via OperatorHub, but the Operator's CSV (ClusterServiceVersion) status is stuck at 'Pending'. Upon investigating, the administrator discovers that the required CustomResourceDefinitions (CRDs) have conflicting versions with a previously deleted Operator. How can the administrator forcefully clean up orphaned CRDs if OLM fails to remove them?
Finalizers often block deletion of CRDs if controllers are missing; removing finalizers lets Kubernetes complete deletion.
Why this answer
Orphaned or stuck CRDs can be edited to remove finalizers (metadata.finalizers) so Kubernetes can successfully delete them.
An administrator needs to configure custom container runtime parameters (such as the maximum pod log size or maximum number of processes per container) across all worker nodes in an OpenShift 4.14 cluster. Which custom resource should the administrator create?
The ContainerRuntimeConfig custom resource allows administrators to customize CRI-O settings across a MachineConfigPool.
Why this answer
Container runtime settings such as max log size and storage options are managed using the ContainerRuntimeConfig custom resource in OpenShift.
An administrator wants to check whether any worker nodes in an OpenShift 4.14 cluster are currently unschedulable (cordoned). Which command provides this information quickly?
Cordoned nodes show 'SchedulingDisabled' in the STATUS column of 'oc get nodes'.
Why this answer
The 'oc get nodes' command displays node status, including whether scheduling is disabled (SchedulingDisabled).
When draining a worker node in OpenShift 4.14, which type of pod running on the node will typically be blocked from eviction unless explicitly ignored or handled?
Naked pods will prevent eviction unless '--force' is supplied because losing them results in immediate workload termination.
Why this answer
Pods that are not managed by a ReplicationController, ReplicaSet, Job, DaemonSet, or StatefulSet (often called naked pods) are not safely replicated and require '--force' or special handling during drainage.
An administrator wants to check the status of all Certificate Signing Requests (CSRs) in an OpenShift 4.14 cluster, specifically looking for pending node certificates. Which command should be used?
oc get csr lists certificate requests and their approval status.
Why this answer
The 'oc get csr' command lists all certificate signing requests, allowing administrators to approve pending node bootstrapping certificates if necessary.
An administrator needs to verify that the cluster autoscaler is successfully scaling worker nodes in response to pending pods. Which custom resource should the administrator inspect to check the autoscaler configuration and status?
ClusterAutoscaler defines cluster-wide autoscaling limits, and MachineAutoscaler targets specific MachineSets.
Why this answer
Cluster scaling parameters and status are managed and viewed via the ClusterAutoscaler and MachineAutoscaler custom resources in OpenShift.
An administrator needs to ensure that if a worker node freezes or becomes unresponsive for more than 5 minutes, the cluster automatically remediates it by deleting and recreating the underlying virtual machine instance. Which OpenShift 4.14 feature should the administrator configure?
A MachineHealthCheck monitors node conditions and triggers remediation (machine deletion/recreation) if nodes fail.
Why this answer
MachineHealthCheck allows administrators to define criteria (such as node not ready conditions) and automatically remediate unhealthy nodes by deleting their corresponding Machine objects.
Which TWO commands can an administrator use to check the overall status or health of core OpenShift 4.14 cluster operators? (Choose TWO)
oc get clusteroperators lists all platform operators and their health conditions.
Why this answer
Administrators use 'oc get clusteroperators' and 'oc get clusterversion' to check core cluster operator health and upgrade status.
An administrator needs to perform a graceful maintenance reboot on a worker node named worker-01 in an OpenShift 4.14 cluster without causing application downtime for stateless deployments. Which combination of actions should the administrator perform first?
Cordoning marks the node unschedulable, and draining safely evicts workloads respecting PodDisruptionBudgets.
Why this answer
To safely maintain a worker node, the administrator must first cordon the node to prevent new pod scheduling and then drain it to gracefully evict existing workloads with proper pod disruption budgets.
What is the primary function of a MachineSet in an OpenShift 4.14 cluster running on a cloud provider?
MachineSets manage groups of machines to maintain desired replica counts.
Why this answer
A MachineSet ensures that a specified number of machine replicas are running, acting similarly to a ReplicaSet for pods but for compute machines.
An administrator needs to check the status of all MachineSets in an OpenShift 4.14 cluster to see how many worker machines are currently provisioned and running. Which command should be used?
MachineSets are namespaced (typically in openshift-machine-api), and 'oc get machinesets' shows their replica status.
Why this answer
The 'oc get machinesets' command lists all MachineSets along with their desired, current, and ready replica counts.
An administrator needs to temporarily prevent the Machine Config Operator from applying pending MachineConfig changes to the worker nodes while performing troubleshooting. How should the administrator accomplish this?
Setting paused to true on a MachineConfigPool stops the MCO from rolling out new configurations to that pool.
Why this answer
To pause updates on a set of nodes, the administrator can set the 'paused: true' field on the corresponding MachineConfigPool resource.
An administrator wants to verify if the OpenShift cluster upgrade to version 4.14 has successfully completed for all core components. Which status field in the ClusterVersion resource should show 'True' for the progressing and available conditions?
When an upgrade completes successfully, Available is True, Progressing is False, and failing is False.
Why this answer
During a successful cluster upgrade, the 'Available' condition is True and the 'Progressing' condition becomes False once completed.
Which TWO methods can an administrator use to view the nodes currently present in an OpenShift 4.14 cluster along with their roles and versions? (Choose TWO)
oc describe node provides detailed hardware, conditions, and capacity info.
Why this answer
Administrators use 'oc get nodes' and 'oc describe node' to inspect node inventory and details.
An administrator wants to modify the default kubelet parameters (such as maximum pods per core or eviction hard thresholds) across worker nodes. Which TWO steps or resources are involved in this process? (Choose TWO)
KubeletConfig is the custom resource used to modify kubelet settings.
Why this answer
Kubelet configuration changes involve creating a KubeletConfig resource and ensuring its selector targets the correct MachineConfigPool.
An administrator wants to configure automated remediation for worker nodes that become unresponsive or experience hardware failure. Which TWO configurations or resources are required for a MachineHealthCheck to function properly? (Choose TWO)
Defines what constitutes failure (e.g., NotReady for 5 minutes) before remediation triggers.
Why this answer
MachineHealthCheck requires target selectors (matchLabels) and node condition timeout definitions (unhealthyConditions).
An administrator notices that a worker node is in a 'NotReady' state due to a storage failure. The administrator successfully replaces the underlying physical machine and wants to clear the old node object from the OpenShift 4.14 cluster. Which command should be used?
Deleting the node object removes it from the Kubernetes API server inventory.
Why this answer
Once a node is drained or permanently offline, the administrator can delete the node resource using 'oc delete node <node-name>'.
An administrator is planning an OpenShift 4.14 cluster upgrade and wants to ensure that specific safety checks and conditions are met before proceeding. Which THREE conditions must be true for an upgrade to proceed smoothly? (Choose THREE)
Degraded node pools can prevent rolling out cluster-wide payload updates.
Why this answer
Cluster version updates require healthy operators (not degraded), available storage/compute resources, and a valid update path.
Which component in OpenShift 4.14 serves as the API entry point for managing MachineAPI resources like Machines and MachineSets?
The Machine API Operator manages the controllers and CRDs for machines.
Why this answer
The Machine API Operator provides the custom resource definitions and controllers for managing Machine and MachineSet objects.
Which TWO tasks are typically performed by an OpenShift cluster administrator when managing worker node lifecycles? (Choose TWO)
Preparing nodes for maintenance requires cordoning and draining.
Why this answer
Administrators manage worker node lifecycles by cordoning and draining nodes for maintenance and labeling them for custom pools.
An administrator is preparing to perform maintenance on worker nodes in an OpenShift 4.14 cluster. Which TWO commands or actions are part of the standard workflow to safely prepare a node for maintenance? (Choose TWO)
Cordoning prevents new pods from being scheduled onto the node during maintenance.
Why this answer
To prepare a node for maintenance, the administrator must cordon it to prevent scheduling and drain it to evict workloads gracefully.
An administrator is managing an OpenShift 4.14 cluster and notices that a newly installed Operator fails to start because it requires a specific version of Kubernetes that is older than what OpenShift 4.14 provides. How does OLM handle Operator compatibility checks during subscription creation?
OLM inspects the CSV definitions and ensures compatibility with the cluster's Kubernetes API version before installation.
Why this answer
OLM checks the 'minVersion' and 'maxVersion' or 'capabilities' specified in the Operator's CSV against the cluster version and will not install an incompatible CSV, keeping the installation pending or failing.
An administrator is setting up a new custom MachineConfigPool for GPU-enabled worker nodes. After creating the MachineConfigPool resource, the administrator creates a MachineConfig that should apply exclusively to these nodes. What must the administrator include in the MachineConfig to ensure it only applies to the GPU pool?
MachineConfig objects require matching labels to be associated with custom MachineConfigPools.
Why this answer
MachineConfigs must include node role labels matching the MachineConfigPool (e.g., pools.operator.machineconfiguration.openshift.io/<pool-name>: '') so the MCO targets the correct nodes.
Which namespace contains the Machine Config Operator (MCO) and its associated daemon pods in OpenShift 4.14?
openshift-machine-config-operator is the namespace where the MCO controller and daemon run.
Why this answer
The MCO runs in the openshift-machine-config-operator namespace.
An administrator installed an Operator via OperatorHub and selected a specific update channel. Later, the administrator wants to switch the Subscription to a different update channel. How should this be performed?
Updating the channel in the Subscription resource tells OLM to look for updates in the new channel.
Why this answer
To change the channel, the administrator edits the Subscription custom resource and updates the 'spec.channel' field to the new channel name.
An administrator is examining the cluster architecture and core operators of OpenShift 4.14. Which THREE core operators run as part of the control plane and platform management? (Choose THREE)
Manages core platform upgrades.
Why this answer
Cluster Version Operator, Machine Config Operator, and Ingress Operator are core platform operators.
An administrator is managing operator subscriptions and wants to ensure that an operator is automatically updated when new versions are released in the channel. Which THREE conditions or configuration settings must be satisfied? (Choose THREE)
OperatorGroups must allow the operator to operate in the desired namespace.
Why this answer
Automatic updates require installPlanApproval set to Automatic, a valid CatalogSource, and an active Subscription.
Which TWO actions can an administrator perform using the 'oc adm' command set related to cluster management? (Choose TWO)
'oc adm upgrade' is used to manage cluster versions and upgrades.
Why this answer
The 'oc adm' command group provides administrative utilities such as cordoning nodes and managing cluster upgrades.
An administrator wants to check the status of Machine API provisioning and verify that all machines are in a running state. Which TWO commands or resource inspections should the administrator perform? (Choose TWO)
oc get machines lists all machine instances and their provisioning phase.
Why this answer
Administrators inspect machines and machinesets using 'oc get machines' and 'oc get machinesets'.
An administrator is inspecting an OpenShift 4.14 cluster and notices that the MachineConfigPool for workers is in a degraded state because a MachineConfig failed to apply. Where should the administrator look to find the exact error encountered by the Machine Config Daemon on the affected nodes?
The machine-config-daemon runs on every node and logs configuration application failures.
Why this answer
The Machine Config Daemon runs as a DaemonSet across all nodes in the openshift-machine-config-operator namespace. Its logs contain the exact ignition and file application errors.
An administrator needs to identify worker nodes that require attention during an upgrade or maintenance. Which TWO conditions or states on a node object indicate potential issues or special maintenance states? (Choose TWO)
Indicates the node is cordoned and unschedulable.
Why this answer
SchedulingDisabled (cordoned) and NotReady indicate maintenance or health issues on nodes.
An administrator wants to check why a specific MachineConfigPool is taking a long time to complete an update. Which status condition on the MachineConfigPool indicates that nodes are currently being updated?
When Updating is True, the MCO is rolling out the new configuration to nodes in the pool.
Why this answer
The MachineConfigPool status includes conditions such as Updating, Updated, and Degraded. The 'Updating' condition indicates that nodes are actively applying the configuration.
Which component in OpenShift 4.14 coordinates the creation of certificates for cluster components and worker nodes?
OpenShift includes automated CSR approvers and certificate controllers for cluster trust.
Why this answer
The Certificate Signing Request (CSR) controller and the Machine Config Operator / cluster-kube-apiserver-operator handle internal PKI and certificate issuance.
An administrator needs to perform an offline (disconnected) upgrade of an OpenShift 4.14 cluster where nodes have no direct internet access. Which resource must be configured in the cluster to supply the release payload images from a local mirror registry?
ImageContentSourcePolicy / ImageTagMirrorSet maps registry domains to local mirror registries for disconnected environments.
Why this answer
In a disconnected environment, an ImageContentSourcePolicy (or ImageTagMirrorSet in newer versions) is configured to redirect image pull requests from official repositories to a local mirror registry.
An administrator is configuring a disconnected (air-gapped) OpenShift 4.14 cluster installation. Which THREE components or resources are critical for successfully managing container image mirroring and catalog sources in this environment? (Choose THREE)
Redirects image pull requests to the local mirror registry.
Why this answer
ImageContentSourcePolicy/ImageTagMirrorSet, mirror registry, and CatalogSource are essential for disconnected installations.
An administrator wants to temporarily disable a MachineHealthCheck so that node maintenance can be performed without triggering automated node deletion. How should this be done?
Deleting the MachineHealthCheck resource prevents automated remediation while performing disruptive node maintenance.
Why this answer
To disable a MachineHealthCheck, the administrator can scale its target remediation or delete the MachineHealthCheck resource, or annotate/pause it depending on implementation, but deleting or scaling spec (if supported) or deleting the MHC resource is standard practice during extended maintenance.
An OpenShift 4.14 cluster administrator has installed an Operator from OperatorHub into a custom namespace using a Subscription. The administrator notices that the Operator pod is not being created. Upon checking the Subscription, the installation mode is set to AllNamespaces, but the Operator target namespace is restricted. Which Operator Lifecycle Manager (OLM) object should the administrator inspect to troubleshoot why the CSV (ClusterServiceVersion) is not installing?
An OperatorGroup defines the namespace scope for OLM Operators. A mismatch prevents CSV creation.
Why this answer
When using OLM, the OperatorGroup defines the namespace scope where Operators can be installed. If the OperatorGroup does not match the Subscription's install mode, the CSV will not install.
Which OpenShift 4.14 command is used to uncordon a worker node and return it to a schedulable state after maintenance?
oc adm uncordon restores scheduling capability to a node.
Why this answer
The 'oc adm uncordon <node-name>' command marks a previously cordoned node as schedulable again.
An administrator needs to configure secure access to a private registry for both node image pulls and OLM operator deployments. Which THREE actions or resources are required across the cluster? (Choose THREE)
Global pull secret enables nodes to pull images from authenticated registries.
Why this answer
Configuring private registries requires updating the global pull secret, configuring ICSP/ITMS for image mirroring, and attaching pull secrets to service accounts if needed.
An administrator running OpenShift 4.14 wants to configure automatic approval for an Operator subscription updates using the Operator Lifecycle Manager. Which field and value in the Subscription resource must be set?
The installPlanApproval field controls whether OLM automatically approves new install plans or requires manual intervention.
Why this answer
Subscriptions have an installPlanApproval field which can be set to 'Automatic' or 'Manual'. Setting it to 'Automatic' allows OLM to automatically install updates.
An administrator needs to update the global pull secret for an OpenShift 4.14 cluster so that nodes can pull images from a new authenticated private registry. Which resource stores the global pull secret?
The cluster global pull secret is located in openshift-config/pull-secret.
Why this answer
The global pull secret is stored in a Secret named 'pull-secret' in the 'openshift-config' namespace.
What is the primary role of Operator Lifecycle Manager (OLM) in OpenShift 4.14?
OLM automates the deployment, updates, and permission management of add-on Operators.
Why this answer
OLM helps administrators install, update, and manage the lifecycle of Kubernetes native applications and Operators in their clusters.
An administrator needs to troubleshoot an upgrade failure in OpenShift 4.14. Which TWO actions or diagnostic steps should the administrator take? (Choose TWO)
Degraded operators block or fail cluster upgrades and must be investigated.
Why this answer
To troubleshoot upgrades, administrators should check clusterversion status and inspect degraded cluster operators.
Which OpenShift 4.14 operator provides a catalog of certified third-party and Red Hat operators available for cluster installation?
OperatorHub lists available operators from CatalogSources.
Why this answer
OperatorHub is the mechanism and user interface catalog powered by the Cluster Catalog Operators where administrators discover and install operators.
An administrator wants to customize worker node behavior in an OpenShift 4.14 cluster using the Machine Config Operator. Which THREE custom resources are natively provided and managed by the MCO for node customization? (Choose THREE)
MachineConfig is the core MCO resource for files, ignition, and OS settings.
Why this answer
The MCO manages MachineConfig, KubeletConfig, and ContainerRuntimeConfig custom resources to configure nodes.
Which custom resource defines a group of nodes (such as all worker nodes or a custom compute pool) that share a common MachineConfig in OpenShift 4.14?
MachineConfigPool groups nodes (e.g., master and worker) and tracks the application of MachineConfigs.
Why this answer
The MachineConfigPool resource groups nodes by role and coordinates applying MachineConfigs to them.
An administrator wants to apply kernel arguments to all worker nodes in an OpenShift 4.14 cluster using the Machine Config Operator. After creating a new MachineConfig object, the administrator notices that the worker nodes are not updating and the MachineConfigPool status shows 'Updating=False'. What is the most likely cause?
MachineConfigs rely on labels to link themselves to specific MachineConfigPools; without them, the pool ignores the config.
Why this answer
The MachineConfig object must include valid labels matching the MachineConfigPool node selector (e.g., pools.operator.machineconfiguration.openshift.io/worker: '') so the Machine Config Operator knows which pool to target.
An administrator is configuring Operator subscriptions in OpenShift 4.14 using OLM. Which THREE parameters can be configured within a Subscription custom resource? (Choose THREE)
The package name of the operator being subscribed to is required.
Why this answer
Subscriptions support setting the channel, package name, catalogSource, and installPlanApproval.
Ready to test yourself?
Try a timed practice session using only Cluster Installation And Management questions.