How should I use these Networking And Network Policies practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Networking And Network Policies questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Networking And Network Policies domain.

EX280 · topic practice

Networking And Network Policies practice questions

Practise Red Hat Certified OpenShift Administrator (EX280, OpenShift Container Platform 4.14+) (EX280) Networking And Network Policies practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Networking And Network Policies

Practice 10 questions Browse domain →

What the exam tests

What to know about Networking And Network Policies

Networking And Network Policies questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Networking And Network Policies exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Networking And Network Policies questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Read the full Networking And Network Policies explanation →

A cluster administrator notices that a NetworkPolicy applied to the database namespace is dropping traffic from the frontend namespace. The policy uses namespaceSelector. Which label must be present on the frontend namespace for traffic to be successfully allowed?

Trap 1: openshift.io/cluster-monitoring=true

This label is reserved for cluster monitoring and does not grant general network policy access.

Trap 2: security.openshift.io/scc=restricted

Security Context Constraints labels are for pod security, not network policy namespace selection.

Trap 3: kubernetes.io/metadata.name matching the namespace name

While kubernetes.io/metadata.name is automatically added in newer Kubernetes versions, standard custom labels defined in the namespaceSelector must match explicitly.

Study all Networking And Network Policies common traps →

A
openshift.io/cluster-monitoring=true
Why wrong: This label is reserved for cluster monitoring and does not grant general network policy access.
B
security.openshift.io/scc=restricted
Why wrong: Security Context Constraints labels are for pod security, not network policy namespace selection.
C
A custom label defined in the namespaceSelector of the NetworkPolicy spec
The namespace must carry the exact key-value pair specified in the namespaceSelector of the ingress rule.
D
kubernetes.io/metadata.name matching the namespace name
Why wrong: While kubernetes.io/metadata.name is automatically added in newer Kubernetes versions, standard custom labels defined in the namespaceSelector must match explicitly.

Networking And Network Policies practice questions

What to know about Networking And Network Policies

Common Networking And Network Policies exam traps

Networking And Network Policies questions

A cluster administrator notices that a NetworkPolicy applied to the database namespace is dropping traffic from the frontend namespace. The policy uses namespaceSelector. Which label must be present on the frontend namespace for traffic to be successfully allowed?

An application pod in OpenShift needs to determine its own IP address and the cluster DNS servers dynamically. Where does CoreDNS look or how are pods configured to resolve cluster DNS?

An administrator wants to expose a Deployment via a NodePort service. What is the default port range allocated for NodePort services in OpenShift if not explicitly configured otherwise?

An administrator needs to check the internal DNS resolution of a service named 'backend' within the 'production' namespace from a debug pod. Which DNS name is fully qualified and valid within the cluster?

An administrator created a Route but external clients receive a 503 Service Unavailable error when attempting to access it. Upon checking the endpoints of the Service referenced by the Route, the administrator discovers there are zero endpoints listed. What is the most likely cause?

An OVN-Kubernetes clustered environment requires configuring egress IP functionality for a specific namespace so that all outgoing traffic from pods in that namespace appears to originate from a designated external IP address. Which custom resource must be configured?

An administrator needs to create a Service of type ClusterIP that exposes an application running on port 8080 inside the container, mapping it to port 80 on the Service. Which command should the administrator use?

An OpenShift administrator needs to expose an internal web application securely using a Route that terminates TLS at the router. Which Route type and configuration requires the administrator to provide the certificate, private key, and CA certificate?

An administrator wants to view the public URL assigned to an existing Route named 'webapp'. Which oc command is best suited to extract only the host URL value?

An administrator needs to modify the default Ingress controller configuration to change its replica count and adjust the router deployment parameters. Which resource should the administrator edit?

An OpenShift administrator needs to restrict access so that pods in namespace 'dev' cannot initiate any outbound connections to pods in namespace 'secure-db'. Which resource should be created in namespace 'secure-db' to achieve this?

An administrator configures a LoadBalancer service on an OpenShift cluster running on a cloud provider. However, the EXTERNAL-IP remains in a <pending> state indefinitely. What is the most likely reason?

An administrator needs to create a passthrough Route that preserves client certificates and forwards encrypted traffic directly to the backend pod. Which spec configuration is required?

A cluster uses OVN-Kubernetes as its CNI network provider. An administrator needs to inspect the logical switches and routers created by OVN within a node. Which command-line tool inside the ovn-node pod should be used?

An administrator wants to configure a NetworkPolicy that allows incoming traffic only from pods with the label 'role=frontend' residing in any namespace, provided those namespaces have the label 'environment=production'. How should the namespaceSelector and podSelector be combined?

An administrator wants to test network connectivity from a pod named 'app-pod-1' to a service port on 'backend-service' using TCP. Which tool is commonly available and ideal for testing TCP port connectivity inside a container?

An administrator creates a NetworkPolicy that restricts egress traffic from a namespace. However, DNS resolution for external services immediately stops working. What is the cause of this behavior?

An administrator needs to configure a custom default certificate for all routes created in the cluster without specifying a certificate on every individual Route object. Where should this wildcard certificate be configured?

An administrator needs to list all Services across all namespaces in the OpenShift cluster. Which command should be used?

An OpenShift administrator needs to inspect how OVN-Kubernetes handles network flows and packet drops on a specific node. Which debugging utility installed in the OVN node container is most effective for viewing OpenFlow rules?

Track your progress over time

Start a Networking And Network Policies only practice session

Related EX280 topic practice pages

Security And SCC practice questions

Troubleshooting And Diagnostics practice questions

User And RBAC Management practice questions

Cluster Installation And Management practice questions

Networking And Network Policies practice questions

Application Deployment And Lifecycle practice questions

Storage And Persistent Volumes practice questions

EX280 fundamentals practice questions

EX280 scenario practice questions

EX280 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid