SIMULATIONScale an application automaticallyAutomatically scale the hydra application deployment configuration in the lerna project with the following requirements:Minimum number of replicas: 6 Maximum number of replicas: 9Target average CPU utilization: 60 percent Container CPU resource request: 25m Container CPU resource limit: 100m
Answer(s): A
Solution:$ oc project lerna$ oc get pods$ oc get all | grep deployment$ oc autoscale deployment.apps/hydra --max=9 --min=6 --cpu-percent=60$ oc get hpa$ oc set resources deployment.apps/hydra --limits=cpu=100m -- requests=cpu=25m$ oc describe deployment.apps/hydra | grep Limits -A3
SIMULATIONConfigure a secure routeConfigure the oxcart application in the area51 project with the following requirements:The application uses a route called oxcartThe application uses a CA signed certificate with the following subject fields:/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com The application is reachable only at the following address: https://classified.apps.domainxx.example.comThe application produces outputA utility script called newcert has been provided to create the CA signed certificate. You may enter the certificate parameters manually or pass the subject as a parameter.Your certificate signing request will be uploaded to the CA where it will immediately be signed and then downloaded to your current directory.
Solution:$ oc project area51$ oc get pods$ oc get all | grep deployment$ oc get route$ oc delete route oxcart$ openssl genrsa -out ex280.key 2048$ openssl req -new -key ex280.key -out ex280.csr -subj "/C=US/ST=NV/L=Hiko/O=CIA/OU=USAF/CN=classified.apps.domainxx.example.com"$ openssl x509 -req -in ex280.csr -signkey ex280.key -out ex280.crt$ oc create route edge oxcart --service oxcart --key ex280.key --cert ex280.crt --hostname classified.apps.domainxx.example.com$ oc get route$ oc get svc
SIMULATIONConfigure a secretConfigure a secret in the math project with the following requirements: The name of the secret is: magicThe secret defines a key with name: decoder_ring The secret defines the key with value:XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=
Solution:$ oc project math$ oc create secret generic magic --from-literal key=decoder_ring --from- literal value=XpWy9KdcP3Tr9FFHGQgZgVRCKukQdrQsbcl0c2ZYhDk=$ oc get secret -n math
SIMULATIONConfigure an application to use a secretConfigure the application called qed in the math project with the following requirements:The application uses the secret previously created called: magic The secret defines an environment variable with name: DECODER_RINGThe application output no longer displays: Sorry, application is not configured correctly.
Solution:$ oc get all | grep deploy$ oc set env --from=secret/magic deployment.apps/qed
SIMULATIONConfigure a service accountConfigure a service account in the apples project to meet the following requirements:The name of the account is ex280saThe account allows pods to be run as any available user
Solution:$ oc project apples$ oc create sa ex280sa$ oc adm policy add-scc-to-user anyuid -z ex280sa
SIMULATIONDeploy an applicationDeploy the application called oranges in the apples project so that the following conditions are true:The application uses the ex280sa service accountNo additional configuration components have been added or removed The application produces output
Solution:$ oc project mercury$ oc get pods$ oc get all | grep deploy$ oc describe deployment.apps/atlas | grep -L memory$ oc set resources deployment.apps/atlas --resources=memory=80Mi
SIMULATIONTask 1Manage Identity ProviderTask information Details: Create the following HTPasswd users: bob, qwerty, john, armstrong, natasha, harry, susan. Create a secret from the HTPasswd file in openshift-config. Configure cluster OAuth to use the HTPasswd identity provider. Restart the OAuth pods so the new authentication configuration takes effect.
Solution:Create the initial HTPasswd file with the first user:htpasswd -c -B -b /tmp/htpass.txt bob indionceAdd the remaining users:htpasswd -b /tmp/htpass.txt qwerty catalog htpasswd -b /tmp/htpass.txt john john123htpasswd -b /tmp/htpass.txt armstrong natasha123htpasswd -b /tmp/htpass.txt natasha arthstrong htpasswd -b /tmp/htpass.txt harry harry123htpasswd -b /tmp/htpass.txt susan susuan123Create the secret in openshift-config:oc create secret generic ex280-secure --from-file=htpasswd=/tmp/htpass.txt -n openshift-configEdit OAuth and add the HTPasswd identity provider:oc edit oauth clusterUse a valid structure like this:spec:identityProviders:- name: ex280-idp-secure mappingMethod: claim type: HTPasswd htpasswd:fileData:name: ex280-secureSave and exit.Restart OAuth pods:oc delete pod -n openshift-authentication -l app=oauth-openshiftVerify:oc get pods -n openshift-authentication oc get oauth cluster -o yamlThis task validates OpenShift local authentication configuration through HTPasswd and cluster OAuth integration.
SIMULATIONTask 2Manage Cluster Project and PermissionTask information Details: Create projects apollo, test, and demo. Grant bob the cluster-admin role. Prevent ordinary authenticated users from self-provisioning projects. Allow john to create projects. Give natasha view-only access to test and apollo. Give armstrong admin access to apollo. Remove the kubeadmin user secret.
Solution:Create the projects:oc new-project apollo oc new-project test oc new-project demoGrant cluster-admin to bob:oc adm policy add-cluster-role-to-user cluster-admin bobDisable normal self-provisioning for authenticated users:oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauthAllow john to self-provision:oc adm policy add-cluster-role-to-user self-provisioner johnGive natasha view access in test and apollo:oc policy add-role-to-user view natasha -n test oc policy add-role-to-user view natasha -n apolloGive armstrong admin in apollo:oc policy add-role-to-user admin armstrong -n apolloRemove kubeadmin secret:oc delete secret kubeadmin -n kube-systemVerify permissions:oc adm policy who-can create projectrequests oc describe rolebinding.rbac -n apollo oc describe rolebinding.rbac -n testThis task tests core OpenShift administration around project lifecycle control, cluster-level RBAC, and decommissioning default bootstrap credentials.
Share your comments for RedHat EX280 exam with other users:
question 182 - correct answer is d. ethernet frame length is 64 - 1518b. length of user data containing is that frame: 46 - 1500b.
i need this exam pls
its required for me, please make it enable to access. thanks
seems good..
took the test last week, i did have about 15 - 20 word for word from this site on the test. (only was able to cram 600 of the questions from this site so maybe more were there i didnt review) had 4 labs, bgp, lacp, vrf with tunnels and actually had to skip a lab due to time. lots of automation syntax questions.
no comments
nice questions bring out the best in you.
really helpful
question #50 and question #81 are exactly the same questions, azure site recovery provides________for virtual machines. the first says that it is fault tolerance is the answer and second says disater recovery. from my research, it says it should be disaster recovery. can anybody explain to me why? thank you
iam thankful for these exam dumps questions, i would not have passed without this exam dumps.
some of the answers seem to be inaccurate. q10 for example shouldnt it be an m custom column?
are the question real or fake?
thank you for providing such assistance.
nice questions
my 3rd purcahse from this site. these exam dumps are helpful. very helpful.
found it good
excellent material
very helpfull
well explained.
i need the pdf, please.
a good source for exam preparation
i need ielts general training audio guide questions
please make this content available
content is good
latest dumps please
aside from pdf the test engine software is helpful. the interface is user-friendly and intuitive, making it easy to navigate and find the questions.
questions and options are correct, but the answers are wrong sometimes. so please check twice or refer some other platform for the right answer
90% of questions was there but i failed the exam, i marked the answers as per the guide but looks like they are not accurate , if not i would have passed the exam given that i saw about 45 of 50 questions from dump
answer to this question "what administrative safeguards should be implemented to protect the collected data while in use by manasa and her product management team? " it should be (c) for the following reasons: this administrative safeguard involves controlling access to collected data by ensuring that only individuals who need the data for their job responsibilities have access to it. this helps minimize the risk of unauthorized access and potential misuse of sensitive information. while other options such as (a) documenting data flows and (b) conducting a privacy impact assessment (pia) are important steps in data protection, implementing a "need to know" access policy directly addresses the issue of protecting data while in use by limiting access to those who require it for legitimate purposes. (d) is not directly related to safeguarding data during use; it focuses on data transfers and location.
password lockout being the correct answer for question 37 does not make sense. it should be geofencing.
for question 4, the righr answer is :recover automatically from failures
question number 4s answer is 3, option c. i
very good questions