Free Preparation Discussions
MENU
RedHat EX380 Exam Questions
- Topic 1: Configure and manage OpenShift Authentication and Identities: Covers integrating OpenShift with external identity providers like LDAP and Keycloak, managing RBAC, group synchronization, and kubeconfig-based authentication.
- Topic 2: Back up and restore applications with OpenShift API for Data Protection (OADP): Covers deploying OADP, performing full application backups including data and resources, using volume snapshots, and scheduling and restoring backups.
- Topic 3: Manage workloads with cluster partitioning: Covers dedicating cluster nodes to specific workloads by configuring node pools, machine configurations, and special-purpose operators.
- Topic 4: Manage workloads with pod scheduling: Covers controlling where pods run using taints, tolerations, labels, selectors, affinity rules, and pod disruption budgets to ensure workload placement and resiliency.
- Topic 5: Implement OpenShift GitOps: Covers deploying and configuring Argo CD with the GitOps operator to manage both cluster administration and application delivery through Git-based pipelines and integrations.
- Topic 6: Manage cluster monitoring and metrics: Covers troubleshooting application and cluster performance issues and managing alerts and notifications.
- Topic 7: Provision and inspect cluster logging: Covers deploying and configuring OpenShift logging with Vector and Loki, forwarding logs externally, querying logs, and diagnosing logging issues.
Free RedHat EX380 Exam Actual Questions
Note: Premium Questions for EX380 were last updated On Apr. 20, 2026 (see below)
SIMULATION
Task SIMULATION 7
Service Accounts and RBAC -- Grant Cluster Reader Role
Step 1: Confirm the service account exists in auth-audit.
It must exist before a role can be assigned to it.
Step 2: Run the command:
oc adm policy add-cluster-role-to-user cluster-reader system:serviceaccount:auth-audit:audit
Step 3: Verify the binding is added.
The lab output shows:
clusterrole.rbac.authorization.k8s.io/cluster-reader added: 'system:serviceaccount:auth-audit:audit'
Detailed explanation:
This binds the cluster-reader cluster role to the audit service account. The full subject format system:serviceaccount:namespace:name is required because OpenShift RBAC needs the exact service account identity. The cluster-reader role is broader than a project-scoped view role because it allows read-level access across cluster resources. This is appropriate for auditing or inspection use cases where the account must observe but not modify. The distinction between cluster roles and namespaced roles is important: cluster roles apply to non-namespaced resources and broad cluster visibility, while local roles are limited to individual projects. This Task is a classic RBAC operation that combines identity creation with controlled privilege assignment.
============
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Currently there are no comments in this discussion, be the first to comment!