Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
SIMULATION
Task 17
Create a namespace for a team and bind a ManagedClusterSet to that namespace
Create a namespace for the team:
oc new-project team-dev
Create ManagedClusterSetBinding to bind ClusterSet development into team-dev:
cat <<'EOF' | oc apply -f -
apiVersion: cluster.open-cluster-management.io/v1beta2
kind: ManagedClusterSetBinding
metadata:
name: development
namespace: team-dev
spec:
clusterSet: development
EOF
Verify:
oc get managedclustersetbinding -n team-dev
Why this matters:
ClusterSet binding is foundational for scoping access and enabling teams to work only with clusters in their set.
SIMULATION
Task 13
Create Kustomization File
Create an empty kustomization file:
touch overlays/production/kustomization.yaml
Validate it exists:
ls -l overlays/production
Why this matters:
kustomization.yaml is the entrypoint file Kustomize uses to build overlays.
SIMULATION
Task 31
Create a policy to enforce ''etcd encryption enabled'' and verify compliance status
In ACM console: Governance Create policy ETCD Encryption template and set to enforce.
Target clusters via Placement.
Confirm policy status: Compliant / NonCompliant per cluster.
SIMULATION
Task 22
Switch a policy from enforce inform (report-only) and validate behavior
Patch remediation to inform:
oc patch policy policy-ensure-audit-namespace -n team-dev --type=merge -p '{'spec':{'remediationAction':'inform'}}'
Verify:
oc get policy policy-ensure-audit-namespace -n team-dev -o yaml | grep remediationAction -n
Observe compliance changes (policy will report but not auto-fix).
SIMULATION
Task 40
Create a compliance dashboard view: group policies by PolicySet and export results
Create PolicySet to group related policies.
Use Governance UI to filter by PolicySet and view compliance per cluster.
Export/report (or capture output via CLI oc get policy -o wide) depending on lab capability.
SIMULATION
Task 9
Create ETCD Encryption Policy (Web Console)
Open the ACM console on the hub.
Navigate to Governance Policies.
Click Create policy.
Set Name: policy-etcd.
Choose the policy template/type ETCD Encryption.
Set Remediation action to enforce.
inform = report only
enforce = attempt to automatically remediate to desired state
Select clusters/ClusterSets to apply (depends on the wizard).
Click Submit.
Verify compliance once applied:
In console, check policy status: Compliant/NonCompliant
Or via CLI:
oc get policy -A
oc describe policy policy-etcd -n
Why this matters:
Governance policies are a core ACM feature for enforcing security baselines across multiple clusters.
SIMULATION
Task 42
Create a Placement that selects clusters in a ManagedClusterSet only
Ensure namespace has the correct ManagedClusterSetBinding.
Create placement in that namespace; only clusters visible via bound ClusterSet can be selected.
Verify placementdecision includes only clusters from that set.
This ties together ClusterSets (grouping) and Placement (selection).
Exam domains verified against: Official RedHat EX432 exam guide, last checked October 2026.
Understand RHACM architecture and components, including how the hub cluster and managed agents interact. Deploy RHACM using Red Hat OpenShift Container Platform Operator Lifecycle Management, install RHACM agents on managed clusters, and operate RHACM through both web terminal and command line interfaces for practical daily tasks.
Create and manage cluster lifecycles including creating new clusters, upgrading existing ones, importing clusters from other sources, and removing clusters when needed. Handle cluster scaling operations to adjust resources based on workload requirements across your multi-cluster environment.
Set up role-based access controls, cluster sets, and cluster selectors to organize and manage permissions across fleets. Use the multi-cluster management dashboard search engine for visibility and troubleshooting, then create and manage RBAC rules and policies that apply consistently to groups and users across clusters.
Understand governance architecture and use RHACM policies to enforce standards across your environment. Configure and deploy the Compliance Operator for multi-cluster compliance checking, work with Compliance Operator policy definitions, and troubleshoot policy enforcement issues when standards are not being met.
Learn the observability architecture that collects metrics and logs from managed clusters back to the hub. Enable the observability stack, configure retention and storage settings for collected data, and customize the stack to focus on metrics and alerts that matter for your operations.
Master Kustomize for templating and customizing Kubernetes resources without repeating boilerplate configuration. Work with overlays and patches to manage different configurations for different environments, then use Kustomize patterns to organize applications that run across multiple clusters.
Sample question from this domain above: Q2
Design Git repositories to support GitOps workflows with clear branch strategies and directory structures. Deploy and configure the GitOps Operator to watch Git repositories for changes, integrate with Kustomize for templating, manage applications through Git commits rather than manual changes, and troubleshoot common synchronization and deployment issues.
Understand Red Hat Virtualization Operator architecture for running virtual machines on OpenShift. Deploy OpenShift Virtualization using GitOps with RHACM, create and manage virtual machines across multiple clusters, and set up monitoring and observability for virtual machine workloads through RHACM.
Common questions about the exam itself
