The EX280 exam validates your ability to deploy, configure, and manage Red Hat OpenShift Container Platform in production environments. This certification, part of the Red Hat Openshift Certifications path, is designed for systems administrators and cloud engineers who work with containerized applications at scale. Red Hat Certified OpenShift Administrator credentials demonstrate hands-on proficiency with cluster operations, security, and troubleshooting. This page provides a focused study roadmap covering the exam syllabus, question formats, and practical preparation strategies to help you pass with confidence.
Use this topic map to guide your study for RedHat EX280 (Red Hat Certified OpenShift Administrator) within the Red Hat Openshift Certifications path.
The EX280 exam combines multiple-choice questions with scenario-based items to assess both conceptual knowledge and practical decision-making in real OpenShift environments.
Questions progress in difficulty and emphasize practical application, ensuring you can handle real-world cluster operations under pressure.
Effective preparation combines structured topic review with hands-on lab practice and timed practice tests. Allocate study time proportionally to exam weight, and regularly connect concepts across installation, operations, and troubleshooting workflows.
Explore other RedHat certifications: view all RedHat exams.
Strengthen your preparation with up‑to‑date resources from validexamdumps.com. These materials align to EX280 and cover practical scenarios with clear explanations.
Visit the exam page to download the PDF, Online Practice Test, or get a bundle discount for both formats: Red Hat Certified OpenShift Administrator.
Cluster installation, node management, RBAC, and troubleshooting typically account for a significant portion of the exam. Workload deployment and storage configuration are also heavily tested. Focus your study time on these domains first, then move to monitoring and compliance topics.
In production, these three areas intersect constantly. For example, you may need to configure network policies to restrict pod-to-pod traffic, assign RBAC roles to limit who can modify storage resources, and ensure persistent volumes are accessible only to authorized workloads. Understanding these connections helps you design secure, scalable clusters and answer scenario-based questions more effectively.
Ideally, you should have at least 6-12 months of OpenShift cluster administration experience. If you lack hands-on exposure, prioritize lab exercises that cover cluster installation, node provisioning, pod deployment, and troubleshooting. Red Hat's official training courses and free sandbox environments can help bridge experience gaps.
Misunderstanding RBAC role scope (cluster vs. namespace), overlooking resource request/limit impacts on scheduling, and confusing persistent volume reclaim policies are frequent pitfalls. Additionally, candidates often rush scenario-based questions without fully reading the problem context. Read each question carefully, and verify your understanding of the cluster state before choosing an answer.
In the final week, focus on weak topics identified in practice tests rather than re-reading all material. Do a full-length timed mock exam to simulate test conditions and identify pacing issues. Review explanations for any missed questions, and spend 30 minutes daily on hands-on CLI drills to build muscle memory for common kubectl and oc commands.
SIMULATION
Task 3
Managing Group
Task information Details:
Create the groups site-users and guest-users.
Add qwerty to guest-users.
Add harry and susan to site-users.
Grant edit to site-users on test.
Grant view to guest-users on demo.
Solution:
Create the groups:
oc adm groups new site-users
oc adm groups new guest-users
Add users to groups:
oc adm groups add-users guest-users qwerty
oc adm groups add-users site-users harry susan
Grant edit role on test to site-users:
oc policy add-role-to-group edit site-users -n test
Grant view role on demo to guest-users:
oc policy add-role-to-group view guest-users -n demo
Verify:
oc get groups
oc describe group site-users
oc describe group guest-users
oc get rolebinding -n test
oc get rolebinding -n demo
This task measures practical administration of OpenShift groups and project-scoped RBAC assignments.
SIMULATION
Task 8
Create Secret with Name Magic in Math Project
Task information Details:
Create a secret named magic in the math project that stores MYSQL_ROOT_PASSWORD=redhat.
Solution:
Switch to the math project:
oc project math
Create the secret:
oc create secret generic magic --from-literal=MYSQL_ROOT_PASSWORD=redhat
Verify:
oc get secret magic
oc describe secret magic
Note:
The uploaded lab text contains a typo --from-listeral; the valid option is --from-literal.
The output in the lab also appears inconsistent. The intended secret name is magic.
This task checks secret creation and secure configuration data handling.
SIMULATION
Configure an identity provider
Configure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:
The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secret
The user account armstrong=indionce The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiver
The user account wozniak=glegunge
Solution:
$ sudo yum install httpd-tools -y
$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce
$ htpasswd -B -b htpasswd-file collins veraster
$ htpasswd -B -b htpasswd-file aldrin roonkere
$ htpasswd -B -b htpasswd-file jobs sestiver
$ htpasswd -B -b htpasswd-file wozniak glegunge
$ oc create secret generic ex280-idp-secret --from-file
htpasswd=htpasswd-file -n openshift-config
$ oc get oauth/cluster -o yaml> oauth.yaml
$ vim oauth.yaml
$
esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting
spec:
identityProviders:
- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:
fileData:
name: ex280-idp-secret
$ oc replace -f oauth.yaml
$ oc login -u armstrong -p indionce
$ oc login -u collins -p veraster
$ oc login -u aldrin roonkere
$ oc login -u jobs sestiver
$ oc login -u wozniak -p glegunge
#This below part of operation is completely optional and done just for handy login purpose
$ alias _kube='oc login -u kubeadmin -p ${kube_pass} ${api_url}'
$ alias _armstrong='oc login -u armstrong -p ${armstrong}
${api_url}'
$ alias _collins='oc login -u collins -p ${collins} ${api_url}'
$ alias _aldrin='oc login -u aldrin -p ${aldrin} ${api_url}'
$ alias _jobs='oc login -u jobs -p ${jobs} ${api_url}'
$ alias _wozniak='oc login -u wozniak -p ${wozniak} ${api_url}'
$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;
SIMULATION
Task 19
Create Project Template
Task information Details:
Generate the bootstrap project template, create it in openshift-config, update the cluster project configuration to use the template, and create a new project to validate it.
Solution:
Generate the default template:
oc adm create-bootstrap-project-template -o yaml > template.yaml
Review and edit template.yaml if required.
Create the template in openshift-config:
oc create -f template.yaml -n openshift-config
Edit the cluster project configuration:
oc edit project.config.openshift.io/cluster
Add or update:
spec:
projectRequestTemplate:
name: project-request
Save and exit.
Create a test project:
oc new-project test123
Verify the template behavior:
oc get project test123 -o yaml
Notes:
The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.config.openshift.io/cluster.
This task checks cluster-wide customization of new-project creation behavior.
SIMULATION
Configure a secret
Configure a secret in the math project with the following requirements: The name of the secret is: magic
The secret defines a key with name: decoder_ring The secret defines the key with value:
XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=
Solution:
$ oc project math
$ oc create secret generic magic --from-literal key=decoder_ring --from- literal value=XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=
$ oc get secret -n math