Certbie

Free practice · No sign-up required

Red Hat Certified OpenShift Architect free practice test

15 questions with answer explanations. Choose an answer below to begin.

Question 1 of 15

What is the primary purpose of a Project in OpenShift?

Show hint

Understand core OpenShift multi-tenancy concepts

0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.

Learn by doing

Put your answers into practice

Use official documentation and hands-on labs to work through topics you missed.

Explore all study resources →

All questions and explanations

Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.

  1. Question 1

    Link to question

    What is the primary purpose of a Project in OpenShift?

    1. To logically isolate resources and access policies for a set of workloads

    2. To define the physical hardware where pods run

    3. To store container images permanently

    4. To replace the need for namespaces

    Show answer and explanation

    Correct answer

    • To logically isolate resources and access policies for a set of workloads

    A Project provides a namespace-like boundary that groups related workloads and applies specific network and policy rules. It helps organize resources and manage role-based access control. It does not define hardware or act as permanent storage.

  2. Question 2

    Link to question

    Which component is responsible for scheduling pods onto nodes in OpenShift?

    1. API server

    2. Controller manager

    3. Scheduler

    4. etcd

    Show answer and explanation

    Correct answer

    • Scheduler

    The scheduler watches newly created pods and selects suitable nodes based on resource availability and policies. The API server exposes the cluster state, the controller manager runs reconciliation loops, and etcd stores cluster data.

  3. Question 3

    Link to question

    What does a BuildConfig primarily define in OpenShift?

    1. How to build a container image from source

    2. How to expose a service externally

    3. How to manage persistent volumes

    4. How to define network policies

    Show answer and explanation

    Correct answer

    • How to build a container image from source

    A BuildConfig specifies the source, build strategy, and output image for creating container images within the platform. It automates the build process but does not govern networking or storage directly.

  4. Question 4

    Link to question

    Which resource definition is used to expose an application running on pods to external traffic?

    1. Service

    2. Route

    3. Ingress

    4. EndpointSlice

    Show answer and explanation

    Correct answer

    • Route

    A Route provides a configurable entry point for external traffic to reach application pods, typically handling HTTP/HTTPS routing. Service defines stable access within the cluster, while Ingress is more generic and often cluster-specific.

  5. Question 5

    Link to question

    What is the main benefit of using ConfigMaps and Secrets?

    1. To decouple configuration artifacts from image content

    2. To increase container image size

    3. To store large binary files efficiently

    4. To replace persistent volumes

    Show answer and explanation

    Correct answer

    • To decouple configuration artifacts from image content

    ConfigMaps and Secrets allow you to manage configuration separately from container images, making applications more portable and easier to update. They are not intended for large binaries or as a storage replacement.

  6. Question 6

    Link to question

    Which OpenShift feature helps ensure only approved container images are deployed?

    1. ImageStreamTags

    2. SecurityContextConstraints

    3. ImagePolicyWebhook

    4. Pod Security Admission

    Show answer and explanation

    Correct answer

    • ImagePolicyWebhook

    ImagePolicyWebhook allows integration with external policy servers to validate image provenance before deployment. ImageStreamTags track image versions, while SecurityContextConstraints and Pod Security Admission manage runtime security.

  7. Question 7

    Link to question

    What does a DeploymentConfig primarily manage?

    1. Lifecycle of replica sets and rolling updates

    2. Network bandwidth allocation

    3. Persistent storage claims

    4. User authentication

    Show answer and explanation

    Correct answer

    • Lifecycle of replica sets and rolling updates

    DeploymentConfig handles the rollout and scaling of application replicas, including strategies like rolling updates. It is not responsible for networking, storage, or authentication.

  8. Question 8

    Link to question

    Which practice helps improve application availability during node maintenance?

    1. Distributing replicas across multiple nodes

    2. Using a single node for all pods

    3. Disabling health checks

    4. Limiting resource requests

    Show answer and explanation

    Correct answer

    • Distributing replicas across multiple nodes

    Spreading replicas across nodes ensures workloads remain available if a node is drained or fails. Concentrating pods or disabling checks reduces resilience.

  9. Question 9

    Link to question

    What is the role of an Operator in OpenShift?

    1. To automate the management of complex stateful applications

    2. To replace the Kubernetes API server

    3. To provide graphical user interfaces only

    4. To store container images indefinitely

    Show answer and explanation

    Correct answer

    • To automate the management of complex stateful applications

    Operators extend Kubernetes to manage application lifecycles, including upgrades and backups, often for stateful services. They do not replace core cluster components or serve as storage solutions.

  10. Question 10

    Link to question

    Which resource is used to limit CPU and memory usage for a container?

    1. ResourceQuota

    2. LimitRange

    3. Pod specification

    4. ConfigMap

    Show answer and explanation

    Correct answer

    • Pod specification

    Container resource limits are defined directly in the Pod specification, ensuring predictable performance and cluster stability. LimitRange provides default limits, and ResourceQuota manages namespace-level consumption.

  11. Question 11

    Link to question

    What does a PersistentVolumeClaim request?

    1. Storage resources from the cluster

    2. Network bandwidth allocation

    3. User permissions

    4. Container image versions

    Show answer and explanation

    Correct answer

    • Storage resources from the cluster

    A PersistentVolumeClaim asks the cluster to provide storage that matches specified access modes and capacity. It does not affect networking, permissions, or image selection.

  12. Question 12

    Link to question

    Which mechanism provides fine-grained access control to OpenShift resources?

    1. Role-Based Access Control (RBAC)

    2. ImageStream

    3. BuildConfig

    4. Pod Disruption Budget

    Show answer and explanation

    Correct answer

    • Role-Based Access Control (RBAC)

    RBAC allows defining roles and bindings to control who can perform actions on specific resources. The other options relate to imaging, builds, and availability, not access control.

  13. Question 13

    Link to question

    What is a common use case for an OpenShift Template?

    1. To define reusable application deployment configurations

    2. To replace container images

    3. To manage node hardware

    4. To store audit logs

    Show answer and explanation

    Correct answer

    • To define reusable application deployment configurations

    Templates provide parameterized definitions for deploying applications consistently across projects. They do not replace images or manage infrastructure or logging.

  14. Question 14

    Link to question

    Which component provides the internal DNS service in OpenShift?

    1. CoreDNS

    2. kube-proxy

    3. API server

    4. Ingress controller

    Show answer and explanation

    Correct answer

    • CoreDNS

    CoreDNS handles service discovery within the cluster, allowing pods to resolve other services by name. kube-proxy manages network routing, and Ingress handles external access.

  15. Question 15

    Link to question

    What does health checking in OpenShift help ensure?

    1. Containers are restarted if they fail to serve traffic

    2. Images are always pulled from the latest tag

    3. Users cannot change passwords

    4. Nodes are never updated

    Show answer and explanation

    Correct answer

    • Containers are restarted if they fail to serve traffic

    Health checks detect unhealthy containers and trigger restarts or replacements to maintain application availability. They do not govern image updates or user policies.

Read all flashcards

Recall the answer before opening each card.

What is the primary purpose of a Project in OpenShift?

To logically isolate resources and access policies for a set of workloads, providing a namespace-like boundary for multi-tenancy.

Which component schedules pods onto nodes?

The Scheduler watches for new pods and selects suitable nodes based on resource availability, affinity rules, and constraints.

What does a BuildConfig define?

It defines how to build a container image from source code, including the source location, build strategy, and output image.

Which resource exposes a service externally via a hostname?

A Route, which handles HTTP/HTTPS routing with TLS termination and optionally path-based splitting.

What is the main benefit of ConfigMaps and Secrets?

They decouple configuration artifacts (non-sensitive and sensitive) from container images, improving portability and security.

How does OpenShift ensure only approved container images are deployed?

Through ImagePolicyWebhook, an admission controller that validates image provenance before allowing pod creation.

What does a DeploymentConfig manage?

It manages the lifecycle of replica sets, including rolling updates, scaling, and rollout history for applications.

How can you improve application availability during node maintenance?

By distributing pod replicas across multiple nodes so that workload remains available if a node is drained or fails.

What is the role of an Operator?

To automate the management of complex stateful applications, handling tasks like upgrades, backups, and scaling.

Where are CPU and memory limits defined for a container?

In the Pod specification, using resource requests and limits under the containers field.

What does a PersistentVolumeClaim request?

Storage resources from the cluster that match specified access modes and capacity, bound to a PersistentVolume.

Which mechanism provides fine-grained access control in OpenShift?

Role-Based Access Control (RBAC), which defines roles and bindings to control actions on resources.

What is a common use case for an OpenShift Template?

To define reusable, parameterized application deployment configurations for consistent deployments across projects.

Which component provides internal DNS in OpenShift?

CoreDNS serves as the cluster DNS, resolving service names to IP addresses for inter-pod communication.

What do health checks ensure in OpenShift?

They detect unhealthy containers and trigger restarts or traffic removal, maintaining application availability.

What is the difference between a Route and a Service?

A Route provides external HTTP/HTTPS access with hostname and TLS; a Service provides stable internal cluster IP access.

What is the purpose of a LimitRange?

To set default resource limits and minimum/maximum constraints for containers in a namespace.

How does Distributing replicas help availability?

It prevents single points of failure; if one node fails, other nodes continue serving the application.

What does an ImageStreamTag track?

It tracks a specific version or alias of an image in an ImageStream, enabling rolling updates and tagging.

What component stores all cluster state in OpenShift?

etcd stores the cluster's configuration and state, but is not a scheduling or routing component.

Active recall deck

Practice Red Hat Certified OpenShift Architect with real flashcards

Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.

20 free cards

Card 1 of 20

1 reviewed this session

Connect the concepts

Your Red Hat Certified OpenShift Architect study mind map

Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.

Red Hat Certified OpenShift Architect15 questions in this practice set
Understand core OpenShift multi-tenancy concepts(1)
Know the key control plane components and their roles(1)
Understand CI/CD fundamentals in OpenShift(1)
Learn how to expose applications to users(1)
Understand configuration management best practices(1)
Know image governance and admission control mechanisms(1)
Understand application deployment mechanics(1)
Apply high availability principles(1)
Understand automation and extensibility in OpenShift(1)
Manage compute resources effectively(1)
Understand storage provisioning concepts(1)
Implement security and access management(1)
More practice connections(3)
Exam-focused analysis

What this Red Hat Certified OpenShift Architect practice set measures

This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.

Resource Organization and Multi-Tenancy

The practice bank emphasizes how OpenShift organizes workloads and enforces boundaries. A Project provides a namespace-like boundary for resource isolation and access policies, distinct from permanent storage or hardware definitions. Confusion often arises between Projects and other grouping mechanisms; Projects are the primary multi-tenancy unit. Understanding when to use Projects versus simple namespaces is key. The questions test the ability to apply Projects for logical separation without conflating them with storage or compute constructs.

  • Projects isolate resources and RBAC policies for a set of workloads.
  • They are not tied to hardware or used as permanent storage.
  • Templates enable reusable deployment configurations across projects.
  • ConfigMaps and Secrets decouple configuration from images, not from projects.

Application Lifecycle and Configuration

This section covers the build and deployment pipeline in OpenShift. BuildConfig defines how to build a container image from source, automating CI/CD. DeploymentConfig manages replica set lifecycles and rolling updates, distinguishing it from simple Kubernetes Deployments. The questions test the ability to select the correct resource for exposing applications externally (Route) versus internal access (Service). Health checks (probes) ensure containers are restarted if they fail to serve traffic, directly impacting availability decisions. Resource limits defined in the Pod specification govern CPU and memory consumption.

  • BuildConfig automates image creation from source; it does not govern networking.
  • DeploymentConfig handles rollouts and scaling, not storage or authentication.
  • Route provides external HTTP/HTTPS access; Service offers stable internal endpoints.
  • Health checks trigger container restarts on failure, improving availability.

Security and Access Control

OpenShift enforces security through multiple complementary mechanisms. ImagePolicyWebhook validates image provenance before deployment, ensuring only approved images run. RBAC provides fine-grained access control over resources. SecurityContextConstraints and Pod Security Admission manage runtime security but are not the primary image governance tools. The practice bank requires distinguishing image governance from access control and runtime security. Questions also explore how PersistentVolumeClaims request storage and how secrets are decoupled from images, reinforcing least-privilege patterns.

  • ImagePolicyWebhook approves images at admission time; ImageStreamTags track versions.
  • RBAC controls who can perform actions on resources.
  • PersistentVolumeClaims request storage from the cluster; they do not affect networking.
  • ConfigMaps and Secrets decouple sensitive configuration from images.

Cluster Services and Resilience

High availability and cluster infrastructure are central to the architect role. Distributing replicas across nodes prevents downtime during maintenance. Operators automate management of stateful applications, handling upgrades and backups. CoreDNS provides internal DNS for service discovery. The scheduler assigns pods to nodes based on resource availability. Questions test whether you can identify the responsible component for scheduling (Scheduler) versus other control plane elements. Understanding these services ensures reliable and scalable cluster operations.

  • Pod distribution across nodes improves availability during node drains.
  • Operators automate lifecycle management for complex stateful applications.
  • CoreDNS resolves service names for inter-pod communication.
  • Scheduler selects suitable nodes for new pods based on policies.
  • ResourceQuota and LimitRange manage namespace-level consumption.

Study workflow

Turn one Red Hat Certified OpenShift Architect attempt into a study plan

  1. 1

    Review Each Question Without Looking at Answers

    Read each question carefully and attempt to answer based on your existing knowledge. Note any uncertainties. This reveals gaps and builds recall, especially for differentiating similar resources.

  2. 2

    Analyze the Explanation for Every Question

    After answering, read the provided explanation. Focus on why the correct answer is right and how it connects to core architectural concepts. Highlight any new distinctions, such as Route vs. Ingress.

  3. 3

    Group Questions by Underlying Domain

    Categorize each question into domains like multi-tenancy, builds, networking, security, storage, and scheduling. Identify which domains you frequently answer incorrectly and target those for deeper study.

  4. 4

    Create Your Own Variant Questions

    For each question, change one parameter (e.g., 'What if the requirement is internal-only traffic?') and reason which resource would apply. This deepens understanding beyond memorization.

  5. 5

    Use Flashcards to Reinforce Weak Areas

    Generate spaced-repetition flashcards for concepts you find challenging. Quiz yourself daily until you can describe each component's role without hesitation.

FAQ

Questions about this exam practice page

Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.

What is the difference between a Project and a Namespace in OpenShift?+

In OpenShift, a Project is a Kubernetes Namespace with additional annotations and policies. Projects provide enhanced multi-tenancy features like per-project access control and network isolation, while a plain Namespace lacks those OpenShift-specific extensions.

When should I use a Route versus a Service of type LoadBalancer?+

Use a Route for HTTP/HTTPS traffic with hostname-based routing, TLS termination, and path rewriting. A LoadBalancer Service does not provide these features and is suitable for non-HTTP protocols or when using an external load balancer directly.

How does ImagePolicyWebhook enforce image compliance?+

ImagePolicyWebhook is an admission controller that calls an external policy server to verify the image before allowing the pod to be created. It can block images from untrusted registries or enforce signing requirements, complementing but not replacing RBAC.

What is the role of an Operator in managing stateful applications?+

An Operator encodes domain-specific operational knowledge into software to automate the full lifecycle of a stateful application—including provisioning, scaling, upgrades, backups, and recovery. It extends the Kubernetes API to manage these tasks without manual intervention.

How do health checks improve application availability in OpenShift?+

Health checks (liveness and readiness probes) monitor container health. Liveness probes restart unhealthy containers; readiness probes stop sending traffic to unready pods. Together, they ensure only healthy instances serve requests, maintaining application availability during failures.

Keep studying

Build the next review session

Browse another free bank or use the study strategy guide to turn your misses into spaced review.

All free testsStudy strategy