Free RedHat EX280 Exam Actual Questions & Explanations

Last updated on: Jun 1, 2026
Author: Leo Sanchez (Red Hat Certified Instructor & OpenShift Solutions Architect)

The EX280 exam validates your ability to deploy, configure, and manage Red Hat OpenShift Container Platform in production environments. This certification, part of the Red Hat Openshift Certifications path, is designed for systems administrators and cloud engineers who work with containerized applications at scale. Red Hat Certified OpenShift Administrator credentials demonstrate hands-on proficiency with cluster operations, security, and troubleshooting. This page provides a focused study roadmap covering the exam syllabus, question formats, and practical preparation strategies to help you pass with confidence.

EX280 Exam Syllabus & Core Topics

Use this topic map to guide your study for RedHat EX280 (Red Hat Certified OpenShift Administrator) within the Red Hat Openshift Certifications path.

  • Cluster Installation and Configuration: Install and configure OpenShift clusters using the installer-provisioned infrastructure (IPI) and user-provisioned infrastructure (UPI) methods; validate cluster health and node readiness.
  • Managing Compute Resources: Create and manage nodes, machine sets, and machine configs; understand node roles and scheduling constraints for workload placement.
  • Networking and Ingress: Configure network policies, service mesh basics, and ingress controllers; troubleshoot connectivity issues between pods and external traffic.
  • Storage and Persistent Volumes: Provision and manage persistent volumes (PV), persistent volume claims (PVC), and storage classes; handle dynamic provisioning and reclamation policies.
  • User and Role-Based Access Control (RBAC): Implement authentication, authorization, and RBAC policies; manage service accounts and cluster role bindings for least-privilege access.
  • Workload Management: Deploy and manage deployments, stateful sets, daemon sets, and jobs; understand pod scheduling, resource requests, and limits.
  • Monitoring and Logging: Configure cluster monitoring with Prometheus; access and interpret logs from containers and cluster components for troubleshooting.
  • Cluster Upgrades and Maintenance: Perform cluster version upgrades, drain nodes safely, and manage maintenance windows with minimal downtime.
  • Security and Compliance: Apply security contexts, pod security policies, and network segmentation; audit API access and enforce compliance requirements.
  • Troubleshooting and Diagnostics: Use kubectl and OpenShift CLI tools to diagnose pod failures, resource contention, and cluster issues; interpret events and logs effectively.

Question Formats & What They Test

The EX280 exam combines multiple-choice questions with scenario-based items to assess both conceptual knowledge and practical decision-making in real OpenShift environments.

  • Multiple Choice: Test recall of core concepts, feature behavior, and key terminology, for example, identifying the correct RBAC role for a given task or recognizing pod scheduling behavior under resource constraints.
  • Scenario-Based Items: Present realistic cluster problems and require you to select the best troubleshooting approach or configuration strategy, such as diagnosing why a pod fails to start or choosing the right storage solution for a stateful application.
  • Practical Simulation: Require hands-on cluster navigation and configuration using the OpenShift web console and CLI; you may need to create resources, modify configurations, or verify settings in a live environment.

Questions progress in difficulty and emphasize practical application, ensuring you can handle real-world cluster operations under pressure.

Preparation Guidance

Effective preparation combines structured topic review with hands-on lab practice and timed practice tests. Allocate study time proportionally to exam weight, and regularly connect concepts across installation, operations, and troubleshooting workflows.

  • Map the syllabus topics to weekly study goals; track progress and identify weak areas early.
  • Complete practice question sets and review explanations in detail, understand not only what is correct but why other options fail.
  • Link cluster management features across networking, storage, security, and workload domains; understand how changes in one area affect others.
  • Run a timed mini mock exam to build pacing confidence and reduce test anxiety before the actual exam.
  • Hands-on labs are critical: deploy clusters, manage nodes, configure RBAC, and troubleshoot failures in a sandbox environment.

Explore other RedHat certifications: view all RedHat exams.

Get the PDF & Practice Test

Strengthen your preparation with up‑to‑date resources from validexamdumps.com. These materials align to EX280 and cover practical scenarios with clear explanations.

  • Q&A PDF with explanations: topic-mapped questions that clarify why correct options are right and others aren't.
  • Practice Test: realistic items, timed/untimed modes, progress tracking, and detailed review.
  • Focused coverage: aligned to the EX280 syllabus so you study what matters most.
  • Regular updates: content refreshes that reflect syllabus changes and OpenShift platform updates.

Visit the exam page to download the PDF, Online Practice Test, or get a bundle discount for both formats: Red Hat Certified OpenShift Administrator.

Frequently Asked Questions

What topics carry the most weight on the EX280 exam?

Cluster installation, node management, RBAC, and troubleshooting typically account for a significant portion of the exam. Workload deployment and storage configuration are also heavily tested. Focus your study time on these domains first, then move to monitoring and compliance topics.

How do networking, storage, and RBAC connect in real OpenShift projects?

In production, these three areas intersect constantly. For example, you may need to configure network policies to restrict pod-to-pod traffic, assign RBAC roles to limit who can modify storage resources, and ensure persistent volumes are accessible only to authorized workloads. Understanding these connections helps you design secure, scalable clusters and answer scenario-based questions more effectively.

How much hands-on experience do I need before taking EX280?

Ideally, you should have at least 6-12 months of OpenShift cluster administration experience. If you lack hands-on exposure, prioritize lab exercises that cover cluster installation, node provisioning, pod deployment, and troubleshooting. Red Hat's official training courses and free sandbox environments can help bridge experience gaps.

What are common mistakes that cost exam points?

Misunderstanding RBAC role scope (cluster vs. namespace), overlooking resource request/limit impacts on scheduling, and confusing persistent volume reclaim policies are frequent pitfalls. Additionally, candidates often rush scenario-based questions without fully reading the problem context. Read each question carefully, and verify your understanding of the cluster state before choosing an answer.

What is an effective final-week review strategy?

In the final week, focus on weak topics identified in practice tests rather than re-reading all material. Do a full-length timed mock exam to simulate test conditions and identify pacing issues. Review explanations for any missed questions, and spend 30 minutes daily on hands-on CLI drills to build muscle memory for common kubectl and oc commands.

Question No. 1

SIMULATION

Task 3

Managing Group

Task information Details:

Create the groups site-users and guest-users.

Add qwerty to guest-users.

Add harry and susan to site-users.

Grant edit to site-users on test.

Grant view to guest-users on demo.

Show Answer Hide Answer
Correct Answer: A

Solution:

Create the groups:

oc adm groups new site-users

oc adm groups new guest-users

Add users to groups:

oc adm groups add-users guest-users qwerty

oc adm groups add-users site-users harry susan

Grant edit role on test to site-users:

oc policy add-role-to-group edit site-users -n test

Grant view role on demo to guest-users:

oc policy add-role-to-group view guest-users -n demo

Verify:

oc get groups

oc describe group site-users

oc describe group guest-users

oc get rolebinding -n test

oc get rolebinding -n demo

This task measures practical administration of OpenShift groups and project-scoped RBAC assignments.


Question No. 2

SIMULATION

Task 8

Create Secret with Name Magic in Math Project

Task information Details:

Create a secret named magic in the math project that stores MYSQL_ROOT_PASSWORD=redhat.

Show Answer Hide Answer
Correct Answer: A

Solution:

Switch to the math project:

oc project math

Create the secret:

oc create secret generic magic --from-literal=MYSQL_ROOT_PASSWORD=redhat

Verify:

oc get secret magic

oc describe secret magic

Note:

The uploaded lab text contains a typo --from-listeral; the valid option is --from-literal.

The output in the lab also appears inconsistent. The intended secret name is magic.

This task checks secret creation and secure configuration data handling.


Question No. 3

SIMULATION

Configure an identity provider

Configure your OpenShift cluster to use an HTPasswd identity provider with the following requirements:

The name of the identity provider is: ex280-htpasswd The name of the secret is: ex280-idp-secret

The user account armstrong=indionce The user account collins=veraster The user account aldrin=roonkere The user account jobs=sestiver

The user account wozniak=glegunge

Show Answer Hide Answer
Correct Answer: A

Solution:

$ sudo yum install httpd-tools -y

$ htpasswd -c -B -b htpasswd-file-upload armstrong indionce

$ htpasswd -B -b htpasswd-file collins veraster

$ htpasswd -B -b htpasswd-file aldrin roonkere

$ htpasswd -B -b htpasswd-file jobs sestiver

$ htpasswd -B -b htpasswd-file wozniak glegunge

$ oc create secret generic ex280-idp-secret --from-file

htpasswd=htpasswd-file -n openshift-config

$ oc get oauth/cluster -o yaml> oauth.yaml

$ vim oauth.yaml

$

esc--> type :set paste --> enter --> insert --> then paste the content for correct indent pasting

spec:

identityProviders:

- name: ex280-htpasswd mappingMethod: claim type: HTPasswd htpasswd:

fileData:

name: ex280-idp-secret

$ oc replace -f oauth.yaml

$ oc login -u armstrong -p indionce

$ oc login -u collins -p veraster

$ oc login -u aldrin roonkere

$ oc login -u jobs sestiver

$ oc login -u wozniak -p glegunge

#This below part of operation is completely optional and done just for handy login purpose

$ alias _kube='oc login -u kubeadmin -p ${kube_pass} ${api_url}'

$ alias _armstrong='oc login -u armstrong -p ${armstrong}

${api_url}'

$ alias _collins='oc login -u collins -p ${collins} ${api_url}'

$ alias _aldrin='oc login -u aldrin -p ${aldrin} ${api_url}'

$ alias _jobs='oc login -u jobs -p ${jobs} ${api_url}'

$ alias _wozniak='oc login -u wozniak -p ${wozniak} ${api_url}'

$ _armstrong;_armstrong;_collins;_aldrin;_jobs;_wozniak;


Question No. 4

SIMULATION

Task 19

Create Project Template

Task information Details:

Generate the bootstrap project template, create it in openshift-config, update the cluster project configuration to use the template, and create a new project to validate it.

Show Answer Hide Answer
Correct Answer: A

Solution:

Generate the default template:

oc adm create-bootstrap-project-template -o yaml > template.yaml

Review and edit template.yaml if required.

Create the template in openshift-config:

oc create -f template.yaml -n openshift-config

Edit the cluster project configuration:

oc edit project.config.openshift.io/cluster

Add or update:

spec:

projectRequestTemplate:

name: project-request

Save and exit.

Create a test project:

oc new-project test123

Verify the template behavior:

oc get project test123 -o yaml

Notes:

The uploaded lab text shows projects.config.openshift.io cluster-admin; the standard resource is project.config.openshift.io/cluster.

This task checks cluster-wide customization of new-project creation behavior.


Question No. 5

SIMULATION

Configure a secret

Configure a secret in the math project with the following requirements: The name of the secret is: magic

The secret defines a key with name: decoder_ring The secret defines the key with value:

XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=

Show Answer Hide Answer
Correct Answer: A

Solution:

$ oc project math

$ oc create secret generic magic --from-literal key=decoder_ring --from- literal value=XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=

$ oc get secret -n math