The EX280 exam validates your ability to deploy, manage, and secure applications on Red Hat OpenShift Container Platform. This certification, part of the Red Hat Openshift Certifications pathway, is designed for platform engineers and system administrators who work with containerized infrastructure at scale. This page outlines the exam syllabus, question formats, and practical preparation strategies to help you study efficiently and pass with confidence. Whether you're new to OpenShift or building on existing container knowledge, understanding the core domains will focus your preparation on what matters most.
Use this topic map to guide your study for RedHat EX280 (Red Hat Certified OpenShift Administrator) within the Red Hat Openshift Certifications path.
EX280 combines multiple choice and scenario-based questions to assess both conceptual knowledge and practical decision-making. The exam measures your ability to recognize correct configurations, troubleshoot issues, and choose the best approach for real-world OpenShift operations.
Questions increase in difficulty and reward candidates who connect theory to hands-on platform experience. Success requires both memorization of concepts and practical judgment in troubleshooting scenarios.
Build a structured study plan that maps each exam domain to weekly goals and includes regular hands-on practice. Dedicate time to both learning new concepts and reinforcing weak areas through repeated question review.
Explore other RedHat certifications: view all RedHat exams.
Strengthen your preparation with up-to-date resources from validexamdumps.com. These materials align to EX280 and cover practical scenarios with clear explanations.
Visit the exam page to download the PDF, Online Practice Test or get Bundle Discount offer for both Formats: Red Hat Certified OpenShift Administrator.
Manage OpenShift Container Platform, Deploy applications, and Manage authentication and authorization typically represent the largest portion of the exam. These domains form the foundation of daily OpenShift operations. However, all nine topics are fair game, so balanced preparation across all domains is essential for a strong score.
In practice, these domains overlap continuously. You manage the cluster (domain 1), write manifests (domain 2) to deploy apps (domain 3), then configure RBAC (domain 4) so developers can access their namespaces. You apply network policies (domain 5) to secure traffic, expose services (domain 6), enable self-service (domain 7), deploy operators (domain 8) for platform features, and enforce security controls (domain 9). Understanding these connections helps you see the bigger picture and answer scenario questions more confidently.
At least 3-6 months of practical OpenShift experience is recommended. Ideally, you should have deployed applications, managed namespaces, configured RBAC, and troubleshot common issues in a real or lab cluster. Hands-on work builds muscle memory for manifest editing, CLI commands, and decision-making that pure study cannot replace. If you lack experience, allocate extra time to lab exercises before the exam.
Misunderstanding RBAC scope (cluster vs. namespace roles) leads to incorrect authorization answers. Confusing Service types (ClusterIP vs. NodePort vs. LoadBalancer) and when to use each causes exposure-related errors. Overlooking the interaction between NetworkPolicies and application connectivity trips up many candidates. Finally, rushing through scenario questions without reading all details often results in selecting a plausible but incorrect answer. Slow down, read fully, and reason through cause-and-effect before choosing.
Spend the first 3-4 days reviewing weak topics and retaking practice questions in those areas. Mid-week, take a full-length timed practice test under exam conditions to identify remaining gaps. Use the final 2-3 days for targeted review of commonly missed question types and a quick scan of key definitions and commands. Avoid learning new material in the last week; focus instead on reinforcing what you already know and building confidence in your pacing.
SIMULATION
Task 14
Collect Cluster Information
Task information Details:
Run must-gather and archive the gathered data into a tar file.
Solution:
Run must-gather:
oc adm must-gather
Confirm the directory created, usually something like:
ls
Archive the directory:
tar -cvzf system10-4ktjl-l4kj5l-lk45j.tar.gz must-gather.local.*
Verify:
ls -lh *.tar.gz
Notes:
The lab text shows a tar command without source paths. A valid tar command must include the source directory or files.
Use the actual must-gather output directory generated in your environment.
This task validates support-data collection and cluster diagnostics handling.
SIMULATION
Task 12
Deploy Application in the Project QED
Task information Details:
Set the service account for the specified deployment in project qed to project1-sa.
Solution:
Ensure you are in the correct project:
oc project qed
Set the service account on the deployment:
oc set serviceaccount deployment/gitlab-skdjfklj project1-sa
Verify:
oc get deployment gitlab-skdjfklj -o yaml | grep serviceAccount
oc describe deployment gitlab-skdjfklj
If required, restart rollout:
oc rollout restart deployment/gitlab-skdjfklj
This task checks workload identity assignment through service accounts.
SIMULATION
Scale an application manually
Manually scale the minion application in the gru project to a total of 5 replicas.
Solution:
$ oc project gru
$ oc get pods
$ oc get all | grep deployment
$ oc scale --replicas=5 deployment.apps/minion
$ oc get pods
SIMULATION
Configure a service account
Configure a service account in the apples project to meet the following requirements:
The name of the account is ex280sa
The account allows pods to be run as any available user
Solution:
$ oc project apples
$ oc create sa ex280sa
$ oc adm policy add-scc-to-user anyuid -z ex280sa
SIMULATION
Configure project permissions
Configure your OpenShift cluster to meet the following requirements: The following projects exist:
apollo manhattan gemini bluebook titan
The user account armstrong is an administrator for project apollo and project gemini
The user account wozniak can view project titan but not administer or delete it
Solution:
$ oc new-project apollo
$ oc new-project manhattan
$ oc new-project gemini
$ oc new-project bluebook
$ oc new-project titan
$ oc adm policy add-role-to-user admin armstrong -n apollo
$ oc adm policy add-role-to-user admin armstrong -n gemini
$ oc adm policy add-role-to-user view wozniak -n titan