How should I use these User And RBAC Management practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just User And RBAC Management questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the User And RBAC Management domain.

EX280 · topic practice

User And RBAC Management practice questions

Practise Red Hat Certified OpenShift Administrator (EX280, OpenShift Container Platform 4.14+) (EX280) User And RBAC Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: User And RBAC Management

Practice 10 questions Browse domain →

What the exam tests

What to know about User And RBAC Management

User And RBAC Management questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common User And RBAC Management exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

User And RBAC Management questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full User And RBAC Management explanation →

A new user named 'sarah' requires read-only access to all resources within the 'web-frontend' project. Which CLI command creates the appropriate RoleBinding?

Trap 1: oc set role view sarah -n web-frontend

This command syntax is invalid for binding roles.

Trap 2: oc add-user sarah --role=view -n web-frontend

This command does not exist in OpenShift CLI.

Study all User And RBAC Management common traps →

A
oc set role view sarah -n web-frontend
Why wrong: This command syntax is invalid for binding roles.
B
oc create rolebinding sarah-view --clusterrole=view --user=sarah -n web-frontend
Both commands are valid, but the policy command is the standard streamlined helper. Let's adjust to ensure unique correctness or select the standard policy command.
C
oc adm policy add-role-to-user view sarah -n web-frontend
This command binds the 'view' role to user 'sarah' in the 'web-frontend' namespace.
D
oc add-user sarah --role=view -n web-frontend
Why wrong: This command does not exist in OpenShift CLI.

User And RBAC Management practice questions

What to know about User And RBAC Management

Common User And RBAC Management exam traps

User And RBAC Management questions

A new user named 'sarah' requires read-only access to all resources within the 'web-frontend' project. Which CLI command creates the appropriate RoleBinding?

Which OpenShift default role allows a user to see the resources in a project but explicitly prevents them from viewing build configurations, build logs, and secrets?

An OpenShift cluster uses an external identity provider (IdP). A user named 'alex@example.com' has successfully logged in via the web console. You need to verify which groups this user belongs to from the command line as an administrator. Which command provides this information?

You need to inspect the effective permissions of a service account named 'cicd-bot' in the 'ci-cd' namespace to see if it can list deployments. Which command should you run?

A cluster administrator has created a custom ClusterRole named 'pod-debugger' with permissions to execute commands in pods. They want to ensure that only users in the 'development' group can utilize this role within the 'app-dev' project. How should they configure this?

An administrator needs to grant read-only access to pods across all namespaces to a specific service account named 'monitor-sa' in the 'monitoring' project. Which RBAC resource configuration is required?

Which default OpenShift cluster role grants full administrative privileges to manage all resources within a specific project when bound via a RoleBinding?

You need to create a new project named 'secure-store' with a specified display name and description, and assign 'jane' as the project admin using the OpenShift CLI. Which command should you execute?

A cluster administrator wants to restrict a specific group of developers from creating persistent volume claims (PVCs) larger than 50Gi in the 'data-tier' namespace, while still allowing smaller PVCs. How should this be implemented?

You are configuring an OAuth identity provider in OpenShift using the HTPasswdPasswordIdentityProvider method. Where must the generated htpasswd user credentials file be stored so the cluster authentication operator can read it?

An administrator needs to prevent developers from consuming more than 10 CPU cores and 40Gi of memory collectively across all pods running in the 'production' namespace. Which object satisfies this requirement?

A system administrator needs to revoke the 'admin' role from user 'bob' in the 'finance' project without deleting the project or affecting other users. Which command should be used?

An organization requires that specific projects created by developers automatically receive a default ResourceQuota and LimitRange. How can an administrator achieve this in OpenShift?

You need to configure a ClusterRole that permits reading metrics endpoints across all namespaces but nothing else. Which API groups and resources must be specified in the rules block?

What is the primary function of the 'self-provisioner' cluster role in OpenShift?

An administrator wants to prevent non-admin users from creating any new projects in the OpenShift cluster. How can this be accomplished?

A cluster has a custom SCC (SecurityContextConstraints) named 'restricted-custom'. You need to grant a specific ServiceAccount named 'app-sa' in namespace 'app-ns' permission to use this SCC. How is this association correctly established?

Which command allows an administrator to view all currently configured SecurityContextConstraints in an OpenShift cluster?

An administrator configured an LDAP identity provider in OpenShift, but users report authentication failures. Upon checking the cluster logs, you find errors indicating that the bind DN password secret is missing or incorrect. Where must this bind password be stored?

Track your progress over time

Start a User And RBAC Management only practice session

Related EX280 topic practice pages

Security And SCC practice questions

Troubleshooting And Diagnostics practice questions

User And RBAC Management practice questions

Cluster Installation And Management practice questions

Networking And Network Policies practice questions

Application Deployment And Lifecycle practice questions

Storage And Persistent Volumes practice questions

EX280 fundamentals practice questions

EX280 scenario practice questions

EX280 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid