Certbie

Free practice · No sign-up required

Red Hat Certified OpenShift Administrator free practice test

15 questions with answer explanations. Choose an answer below to begin.

Question 1 of 15

What is the primary purpose of a Project in OpenShift?

Show hint

Understand core OpenShift concepts and multi-tenancy

0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.

Learn by doing

Put your answers into practice

Use official documentation and hands-on labs to work through topics you missed.

Explore all study resources →

All questions and explanations

Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.

  1. Question 1

    Link to question

    What is the primary purpose of a Project in OpenShift?

    1. To isolate resources and access control for a set of workloads

    2. To define a cluster-wide network policy

    3. To store persistent volumes only

    4. To replace the need for namespaces

    Show answer and explanation

    Correct answer

    • To isolate resources and access control for a set of workloads

    A Project provides a namespace-like boundary that groups workloads and enforces role-based access control. It helps organize resources and manage permissions for a team or application.

  2. Question 2

    Link to question

    Which OpenShift object is best suited for defining a repeatable application deployment process?

    1. BuildConfig

    2. DeploymentConfig

    3. ImageStream

    4. Route

    Show answer and explanation

    Correct answer

    • DeploymentConfig

    A DeploymentConfig manages the lifecycle of application pods, including triggers for new deployments. It is the standard workload for traditional OpenShift application deployment.

  3. Question 3

    Link to question

    What does a BuildConfig in OpenShift primarily define?

    1. How to package and deploy a service

    2. How to fetch source code and produce an image

    3. How to route external traffic to a pod

    4. How to secure pod communication

    Show answer and explanation

    Correct answer

    • How to fetch source code and produce an image

    A BuildConfig specifies the source, build strategy, and output image for creating container images from source code. It is central to CI workflows.

  4. Question 4

    Link to question

    Which command would you use to view the current status of pods in a specific OpenShift project?

    1. oc describe project

    2. oc get pods

    3. oc view build

    4. oc status route

    Show answer and explanation

    Correct answer

    • oc get pods

    The oc get pods command lists pods and their current states within the active or specified project. It is a common troubleshooting and monitoring action.

  5. Question 5

    Link to question

    What is the role of an ImageStream in OpenShift?

    1. To provide a user interface for developers

    2. To track and manage container image changes

    3. To define network routes for external access

    4. To store build logs permanently

    Show answer and explanation

    Correct answer

    • To track and manage container image changes

    An ImageStream monitors container images in a registry and notifies OpenShift of updates. It enables deployments to react to new image tags automatically.

  6. Question 6

    Link to question

    Which OpenShift feature allows you to expose an application internally or externally with a consistent endpoint?

    1. ConfigMap

    2. Route

    3. Secret

    4. ServiceAccount

    Show answer and explanation

    Correct answer

    • Route

    A Route provides a stable hostname and load balancing for accessing a service, handling TLS termination and ingress traffic. It abstracts the underlying service IP and port.

  7. Question 7

    Link to question

    What is the default behavior when a BuildConfig triggers a new build?

    1. It automatically promotes the previous deployment

    2. It creates a new DeploymentConfig revision

    3. It deletes old build artifacts

    4. It requires manual approval to start

    Show answer and explanation

    Correct answer

    • It creates a new DeploymentConfig revision

    When a BuildConfig is triggered, it starts a new build that produces an image. A successful build can then update the associated DeploymentConfig with the new image.

  8. Question 8

    Link to question

    Which resource definition would you use to enforce constraints on pod resource usage?

    1. LimitRange

    2. NetworkPolicy

    3. PodSecurityPolicy

    4. ConfigMap

    Show answer and explanation

    Correct answer

    • LimitRange

    LimitRange sets minimum and maximum resource requests and limits for containers in a Project. It helps prevent resource exhaustion and ensures fair scheduling.

  9. Question 9

    Link to question

    What does a PersistentVolumeClaim in OpenShift request?

    1. A specific physical storage device

    2. Storage resources that meet certain criteria

    3. A backup of existing data

    4. A network share path

    Show answer and explanation

    Correct answer

    • Storage resources that meet certain criteria

    A PersistentVolumeClaim asks for storage resources matching specified access modes and capacity. The cluster then binds it to an appropriate PersistentVolume.

  10. Question 10

    Link to question

    Which OpenShift object defines access policies for a set of pods?

    1. Role

    2. NetworkPolicy

    3. BuildConfig

    4. ImageStreamTag

    Show answer and explanation

    Correct answer

    • NetworkPolicy

    A NetworkPolicy specifies how pods are allowed to communicate with each other and other network endpoints. It is key for implementing zero-trust networking.

  11. Question 11

    Link to question

    What is the purpose of a DeploymentConfig trigger?

    1. To restart pods on failure

    2. To initiate a new build or deployment when changes occur

    3. To delete old configuration maps

    4. To rotate secrets automatically

    Show answer and explanation

    Correct answer

    • To initiate a new build or deployment when changes occur

    Triggers in a DeploymentConfig cause a new deployment when a related image changes or a configuration update happens. They automate rollout actions.

  12. Question 12

    Link to question

    Which command would you use to view detailed information about a specific route?

    1. oc route describe

    2. oc get route -o wide

    3. oc describe route

    4. oc inspect route

    Show answer and explanation

    Correct answer

    • oc describe route

    The oc describe route command shows detailed status and configuration for a specific route, including host, path, and associated service.

  13. Question 13

    Link to question

    What is a common use case for a ConfigMap in OpenShift?

    1. To store database passwords securely

    2. To inject configuration data into pods as environment variables or files

    3. To define pod scheduling constraints

    4. To manage image pull secrets

    Show answer and explanation

    Correct answer

    • To inject configuration data into pods as environment variables or files

    ConfigMaps hold non-sensitive configuration data that pods can consume as environment variables or mounted files. They separate configuration from container images.

  14. Question 14

    Link to question

    Which OpenShift admission control helps prevent privilege escalation?

    1. ImagePolicy

    2. SecurityContextConstraints

    3. NetworkPolicy

    4. BuildTriggerPolicy

    Show answer and explanation

    Correct answer

    • SecurityContextConstraints

    SecurityContextConstraints define permissions for containers, such as running as root or using privileged mode. They enforce security boundaries at runtime.

  15. Question 15

    Link to question

    What does the OpenShift web console's Topology view primarily display?

    1. Cluster-wide resource usage metrics

    2. Services, routes, and related pods in a project

    3. Build history and logs

    4. User and role bindings

    Show answer and explanation

    Correct answer

    • Services, routes, and related pods in a project

    The Topology view provides a visual map of services, routes, and pods within a project, helping users understand application structure and connections.

Read all flashcards

Recall the answer before opening each card.

What is the primary purpose of a Project in OpenShift?

To isolate resources and access control for a set of workloads, providing a namespace-like boundary for multi-tenancy and RBAC.

Which OpenShift object defines a repeatable application deployment process?

DeploymentConfig. It manages the lifecycle of application pods, including triggers for new deployments, and is the standard workload for traditional deployments.

What does a BuildConfig primarily define?

A BuildConfig specifies how to fetch source code, the build strategy, and the output image for creating container images from source.

What command lists pods in an OpenShift project?

oc get pods. It lists pods and their current states within the active or specified project.

What is the role of an ImageStream in OpenShift?

To track and manage container image changes, monitoring registries and notifying OpenShift of updates to enable automatic deployments.

How can you expose an application with a consistent external endpoint?

Use a Route. It provides a stable hostname and load balancing for accessing a service, handling TLS termination and ingress traffic.

What happens by default when a BuildConfig triggers a new build?

It creates a new DeploymentConfig revision. A successful build updates the associated DeploymentConfig with the new image.

Which resource enforces constraints on pod resource usage?

LimitRange. It sets minimum and maximum resource requests and limits for containers in a Project, preventing resource exhaustion.

What does a PersistentVolumeClaim request?

Storage resources that meet certain criteria, such as specific access modes and capacity. The cluster binds it to an appropriate PersistentVolume.

Which object defines access policies for a set of pods?

NetworkPolicy. It specifies how pods are allowed to communicate with each other and other network endpoints, enabling zero-trust networking.

What is the purpose of a DeploymentConfig trigger?

To initiate a new build or deployment when changes occur, such as an image update or configuration change, automating rollout actions.

Which command shows detailed information about a route?

oc describe route. It displays status and configuration including host, path, and associated service.

How can you inject configuration data into pods as environment variables or files?

Use a ConfigMap. It holds non-sensitive configuration data that pods consume as environment variables or mounted files.

Which admission control helps prevent privilege escalation?

SecurityContextConstraints. They define permissions for containers, such as running as root or using privileged mode, enforcing security boundaries.

What does the Topology view in the web console primarily display?

Services, routes, and related pods in a project, providing a visual map of application structure and connections.

What resources does a BuildConfig specify besides source and strategy?

It specifies the output image repository and tag where the built image will be stored.

What does an ImageStream monitor?

It monitors container images in a registry for changes and notifies OpenShift, enabling deployments to react to new image tags.

What does a Route handle besides exposing a service?

It handles TLS termination and load balancing, providing a stable hostname for external or internal access.

What does a PersistentVolumeClaim ask for?

It asks for storage resources matching specified access modes (e.g., ReadWriteOnce) and capacity, binding to a suitable PersistentVolume.

What does a SecurityContextConstraints define?

Permissions for containers, such as running as root, using privileged mode, or accessing host resources, enforcing security at runtime.

Active recall deck

Practice Red Hat Certified OpenShift Administrator with real flashcards

Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.

20 free cards

Card 1 of 20

1 reviewed this session

Connect the concepts

Your Red Hat Certified OpenShift Administrator study mind map

Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.

Red Hat Certified OpenShift Administrator15 questions in this practice set
Understand core OpenShift concepts and multi-tenancy(1)
Work with workload resources and deployment strategies(1)
Understand image builds and CI/CD fundamentals(1)
Use CLI to inspect cluster resources(1)
Manage container images and image change triggers(1)
Expose applications and manage ingress traffic(1)
Understand build and deployment workflows(1)
Apply resource management and quota controls(1)
Manage storage and persistent data(1)
Secure network communication between workloads(1)
Automate application updates and rollouts(1)
Inspect route objects and troubleshoot connectivity(1)
More practice connections(3)
Exam-focused analysis

What this Red Hat Certified OpenShift Administrator practice set measures

This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.

Core OpenShift Concepts and Multi-tenancy

This section tests understanding of the primary unit of organization—Projects—and how they isolate workloads and access control. It also covers basic CLI commands like oc get pods to inspect pod status within a project. Mastery of these fundamentals is essential for navigating an OpenShift cluster and ensuring secure multi-tenancy.

  • Recognize Projects as the boundary for resource grouping and RBAC.
  • Use oc get pods to list pod status in a project.
  • Understand that Projects provide namespace-like isolation.

Application Build and Deployment Pipeline

The practice bank exercises the workflow from source code to running application. BuildConfig defines how to fetch source and produce an image, ImageStream tracks image changes, and DeploymentConfig manages the deployment lifecycle, including triggers for automated rollouts. Together, these resources form a continuous delivery pipeline.

  • Define BuildConfig to specify source, build strategy, and output image.
  • Use ImageStream to monitor registries and trigger deployments on updates.
  • Configure DeploymentConfig triggers to initiate new builds or deployments.
  • A successful BuildConfig creates a new DeploymentConfig revision.

Networking and Exposure

Questions on Routes and NetworkPolicy cover how applications are exposed externally and how pod-to-pod communication is secured. Routes provide a stable hostname with TLS termination, while NetworkPolicy enforces zero-trust rules. The oc describe route command is used to troubleshoot route configuration.

  • Expose services via Routes for consistent external endpoints.
  • Implement NetworkPolicy to restrict traffic between pods.
  • Use oc describe route to view route details including host and TLS settings.

Storage and Configuration Management

This section addresses storage requests via PersistentVolumeClaim, configuration injection with ConfigMap, and resource constraints with LimitRange. These resources decouple state and configuration from container images and prevent resource exhaustion, essential for production workloads.

  • Request specific storage capacity and access modes with PersistentVolumeClaim.
  • Inject configuration as environment variables or files using ConfigMap.
  • Enforce minimum and maximum resource limits with LimitRange.

Study workflow

Turn one Red Hat Certified OpenShift Administrator attempt into a study plan

  1. 1

    Create a Project and Deploy an Application

    Create a new project with oc new-project myapp. Then deploy an application from an image using oc new-app --docker-image=<image>. Verify pods are running with oc get pods. This step establishes resource isolation and basic deployment.

  2. 2

    Set Up a BuildConfig from Git Source

    Use oc new-app <git-repo> to automatically create a BuildConfig. Confirm with oc get bc. Trigger a build with oc start-build <bc-name>. Monitor build logs with oc logs -f bc/<bc-name>. This demonstrates image creation from source.

  3. 3

    Expose a Service Using a Route with TLS

    After creating a service with oc expose deployment <name> --port=8080, create a secure route: oc create route passthrough --service=<svc> --hostname=app.example.com. Verify with oc get route. This step ensures external access with encryption.

  4. 4

    Configure Persistent Storage with PVC

    Create a PersistentVolumeClaim YAML with desired storage class, access modes, and size. Apply with oc apply -f pvc.yaml. Then reference the PVC in a pod spec's volumes. Confirm binding with oc get pvc. This attaches persistent storage to a pod.

  5. 5

    Apply Resource Limits Using LimitRange

    Define a LimitRange YAML that sets default CPU and memory requests/limits for containers. Apply to a project with oc apply -f limitrange.yaml. New pods will validate against these ranges. Test by creating a pod without explicit limits and verify defaults are injected.

FAQ

Questions about this exam practice page

Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.

What is the primary purpose of a Project in OpenShift?+

A Project provides a namespace-like boundary that groups workloads and enforces role-based access control. It isolates resources and permissions for a team or application, enabling multi-tenancy.

How does a BuildConfig relate to a DeploymentConfig?+

A BuildConfig defines how to build an image from source code. When a build succeeds, it can automatically update the associated DeploymentConfig with the new image, triggering a rolling update of pods.

When should you use a Route instead of a Service?+

A Route provides a stable hostname and handles TLS termination and ingress traffic. Use a Route when you need external access with a friendly URL and security; a Service alone is only reachable within the cluster.

What resource would you use to enforce maximum CPU usage per container in a project?+

Use a LimitRange. It defines minimum and maximum resource requests and limits for containers, ensuring fair scheduling and preventing a single container from consuming all cluster resources.

How does a PersistentVolumeClaim request storage?+

A PVC asks for storage with specific access modes (e.g., ReadWriteOnce) and capacity. The cluster binds it to a PersistentVolume that meets those criteria, decoupling pod storage requirements from actual storage infrastructure.

Keep studying

Build the next review session

Browse another free bank or use the study strategy guide to turn your misses into spaced review.

All free testsStudy strategy