Free RedHat EX280 Exam Actual Questions & Explanations

Last updated on: Jul 15, 2026
Author: Eli Allen (Red Hat Certified Solutions Architect)

The EX280 exam validates your ability to deploy, manage, and secure applications on Red Hat OpenShift Container Platform. This certification, part of the Red Hat Openshift Certifications pathway, is designed for platform engineers and system administrators who work with containerized infrastructure at scale. This page outlines the exam syllabus, question formats, and practical preparation strategies to help you study efficiently and pass with confidence. Whether you're new to OpenShift or building on existing container knowledge, understanding the core domains will focus your preparation on what matters most.

EX280 Exam Syllabus & Core Topics

Use this topic map to guide your study for RedHat EX280 (Red Hat Certified OpenShift Administrator) within the Red Hat Openshift Certifications path.

  • Manage OpenShift Container Platform: Install, configure, and maintain OpenShift clusters. You must understand cluster architecture, node management, and operational troubleshooting in production environments.
  • Work with resource manifests: Create and edit YAML manifests for Pods, Deployments, Services, and ConfigMaps. Candidates apply declarative configuration patterns and validate manifest syntax before deployment.
  • Deploy applications: Use Deployments, StatefulSets, and DaemonSets to roll out containerized workloads. You'll manage rolling updates, rollbacks, and health checks to ensure application availability.
  • Manage authentication and authorization: Configure role-based access control (RBAC), service accounts, and user permissions. Implement least-privilege policies and audit access to cluster resources.
  • Configure network security: Apply NetworkPolicies to restrict traffic between pods and namespaces. Design ingress rules and egress controls aligned to application requirements.
  • Expose non-HTTP/SNI Applications: Use Services (ClusterIP, NodePort, LoadBalancer) and Routes to expose applications. Handle protocols beyond HTTP and manage TLS termination where needed.
  • Enable developer self-service: Set up namespaces, resource quotas, and limit ranges so teams can deploy independently. Provide templates and CI/CD integration to reduce operational overhead.
  • Manage OpenShift operators: Deploy and configure Operators using OperatorHub. Understand Operator Lifecycle Manager (OLM) and custom resource definitions (CRDs) for extending platform functionality.
  • Configure application security: Apply Pod Security Policies, SecurityContexts, and image scanning. Enforce container image registries, manage secrets, and implement runtime security controls.

Question Formats & What They Test

EX280 combines multiple choice and scenario-based questions to assess both conceptual knowledge and practical decision-making. The exam measures your ability to recognize correct configurations, troubleshoot issues, and choose the best approach for real-world OpenShift operations.

  • Multiple choice: Test core definitions, feature behavior, and key terminology. Questions focus on understanding what each OpenShift component does and when to use it.
  • Scenario-based items: Present realistic situations (e.g., a deployment failing to scale, network connectivity issues, or access control problems). You analyze the context and select the best solution or configuration change.
  • Configuration reasoning: Ask you to interpret manifest snippets, RBAC policies, or network rules and predict the outcome. Emphasis is on understanding cause-and-effect in OpenShift operations.

Questions increase in difficulty and reward candidates who connect theory to hands-on platform experience. Success requires both memorization of concepts and practical judgment in troubleshooting scenarios.

Preparation Guidance

Build a structured study plan that maps each exam domain to weekly goals and includes regular hands-on practice. Dedicate time to both learning new concepts and reinforcing weak areas through repeated question review.

  • Break the nine domains into a 6-8 week schedule: assign 1-2 topics per week and track progress with a study log.
  • Practice question sets after each topic; review explanations to understand why answers are correct and identify knowledge gaps.
  • Set up a lab environment (local or cloud) and practice deploying applications, configuring RBAC, applying network policies, and managing operators hands-on.
  • Link related concepts across domains (e.g., how authentication policies affect developer self-service, or how network security interacts with application exposure).
  • Take a timed practice test 1-2 weeks before the exam to build pacing confidence and identify last-minute review priorities.

Explore other RedHat certifications: view all RedHat exams.

Get the PDF & Practice Test

Strengthen your preparation with up-to-date resources from validexamdumps.com. These materials align to EX280 and cover practical scenarios with clear explanations.

  • Q&A PDF with explanations: topic mapped questions that clarify why correct options are right and others aren't.
  • Practice Test: realistic items, timed/untimed modes, progress tracking, and detailed review.
  • Focused coverage: aligned to Manage OpenShift Container Platform, Work with resource manifests, Deploy applications, Manage authentication and authorization, Configure network security, Expose non-HTTP/SNI Applications, Enable developer self-service, Manage OpenShift operators, and Configure application security so you study what matters most.
  • Regular reviews: content refreshes that reflect syllabus and product changes.

Visit the exam page to download the PDF, Online Practice Test or get Bundle Discount offer for both Formats: Red Hat Certified OpenShift Administrator.

Frequently Asked Questions

Which domains carry the most weight on EX280?

Manage OpenShift Container Platform, Deploy applications, and Manage authentication and authorization typically represent the largest portion of the exam. These domains form the foundation of daily OpenShift operations. However, all nine topics are fair game, so balanced preparation across all domains is essential for a strong score.

How do the nine domains connect in a real OpenShift project workflow?

In practice, these domains overlap continuously. You manage the cluster (domain 1), write manifests (domain 2) to deploy apps (domain 3), then configure RBAC (domain 4) so developers can access their namespaces. You apply network policies (domain 5) to secure traffic, expose services (domain 6), enable self-service (domain 7), deploy operators (domain 8) for platform features, and enforce security controls (domain 9). Understanding these connections helps you see the bigger picture and answer scenario questions more confidently.

How much hands-on lab experience do I need before taking EX280?

At least 3-6 months of practical OpenShift experience is recommended. Ideally, you should have deployed applications, managed namespaces, configured RBAC, and troubleshot common issues in a real or lab cluster. Hands-on work builds muscle memory for manifest editing, CLI commands, and decision-making that pure study cannot replace. If you lack experience, allocate extra time to lab exercises before the exam.

What are common mistakes that cost candidates points on EX280?

Misunderstanding RBAC scope (cluster vs. namespace roles) leads to incorrect authorization answers. Confusing Service types (ClusterIP vs. NodePort vs. LoadBalancer) and when to use each causes exposure-related errors. Overlooking the interaction between NetworkPolicies and application connectivity trips up many candidates. Finally, rushing through scenario questions without reading all details often results in selecting a plausible but incorrect answer. Slow down, read fully, and reason through cause-and-effect before choosing.

How should I structure my final week of preparation before the exam?

Spend the first 3-4 days reviewing weak topics and retaking practice questions in those areas. Mid-week, take a full-length timed practice test under exam conditions to identify remaining gaps. Use the final 2-3 days for targeted review of commonly missed question types and a quick scan of key definitions and commands. Avoid learning new material in the last week; focus instead on reinforcing what you already know and building confidence in your pacing.

Question No. 1

SIMULATION

Task 14

Collect Cluster Information

Task information Details:

Run must-gather and archive the gathered data into a tar file.

Show Answer Hide Answer
Correct Answer: A

Solution:

Run must-gather:

oc adm must-gather

Confirm the directory created, usually something like:

ls

Archive the directory:

tar -cvzf system10-4ktjl-l4kj5l-lk45j.tar.gz must-gather.local.*

Verify:

ls -lh *.tar.gz

Notes:

The lab text shows a tar command without source paths. A valid tar command must include the source directory or files.

Use the actual must-gather output directory generated in your environment.

This task validates support-data collection and cluster diagnostics handling.


Question No. 2

SIMULATION

Task 12

Deploy Application in the Project QED

Task information Details:

Set the service account for the specified deployment in project qed to project1-sa.

Show Answer Hide Answer
Correct Answer: A

Solution:

Ensure you are in the correct project:

oc project qed

Set the service account on the deployment:

oc set serviceaccount deployment/gitlab-skdjfklj project1-sa

Verify:

oc get deployment gitlab-skdjfklj -o yaml | grep serviceAccount

oc describe deployment gitlab-skdjfklj

If required, restart rollout:

oc rollout restart deployment/gitlab-skdjfklj

This task checks workload identity assignment through service accounts.


Question No. 3

SIMULATION

Scale an application manually

Manually scale the minion application in the gru project to a total of 5 replicas.

Show Answer Hide Answer
Correct Answer: A

Solution:

$ oc project gru

$ oc get pods

$ oc get all | grep deployment

$ oc scale --replicas=5 deployment.apps/minion

$ oc get pods


Question No. 4

SIMULATION

Configure a service account

Configure a service account in the apples project to meet the following requirements:

The name of the account is ex280sa

The account allows pods to be run as any available user

Show Answer Hide Answer
Correct Answer: A

Solution:

$ oc project apples

$ oc create sa ex280sa

$ oc adm policy add-scc-to-user anyuid -z ex280sa


Question No. 5

SIMULATION

Configure project permissions

Configure your OpenShift cluster to meet the following requirements: The following projects exist:

apollo manhattan gemini bluebook titan

The user account armstrong is an administrator for project apollo and project gemini

The user account wozniak can view project titan but not administer or delete it

Show Answer Hide Answer
Correct Answer: A

Solution:

$ oc new-project apollo

$ oc new-project manhattan

$ oc new-project gemini

$ oc new-project bluebook

$ oc new-project titan

$ oc adm policy add-role-to-user admin armstrong -n apollo

$ oc adm policy add-role-to-user admin armstrong -n gemini

$ oc adm policy add-role-to-user view wozniak -n titan