Certbie

Free practice · No sign-up required

Red Hat Certified Specialist in OpenShift Automation and Integration free practice test

15 questions with answer explanations. Choose an answer below to begin.

Question 1 of 15

What is the primary purpose of a BuildConfig in OpenShift?

Show hint

Understand core OpenShift application build mechanisms

0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.

Learn by doing

Put your answers into practice

Use official documentation and hands-on labs to work through topics you missed.

Explore all study resources →

All questions and explanations

Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.

  1. Question 1

    Link to question

    What is the primary purpose of a BuildConfig in OpenShift?

    1. To define how source code is compiled and packaged into container images

    2. To manage user authentication for the cluster

    3. To schedule pods onto worker nodes

    4. To expose services to external traffic

    Show answer and explanation

    Correct answer

    • To define how source code is compiled and packaged into container images

    A BuildConfig automates the process of building container images from source code by defining build strategies and triggers. It does not handle scheduling, authentication, or service exposure.

  2. Question 2

    Link to question

    Which resource definition is used to create ephemeral, on-demand environments for testing?

    1. DeploymentConfig

    2. BuildConfig

    3. Template

    4. Job

    Show answer and explanation

    Correct answer

    • Template

    Templates allow you to define parameterized configurations that can be instantiated to create multiple, isolated environments quickly. This is ideal for temporary testing scenarios.

  3. Question 3

    Link to question

    What does a Route resource primarily manage in OpenShift?

    1. Persistent storage for applications

    2. External access to services via a hostname

    3. Cluster-wide security policies

    4. Node resource allocation

    Show answer and explanation

    Correct answer

    • External access to services via a hostname

    A Route provides a hostname and load balancing for accessing services externally. It manages ingress traffic without requiring direct service IP management.

  4. Question 4

    Link to question

    Which command is used to view the status of the most recent build for a BuildConfig?

    1. oc describe build

    2. oc logs build

    3. oc status buildconfig

    4. oc get bc

    Show answer and explanation

    Correct answer

    • oc describe build

    The 'oc describe build' command provides detailed information about a specific build, including its current phase and events. This helps in troubleshooting build issues.

  5. Question 5

    Link to question

    What is the role of a ServiceAccount in OpenShift?

    1. To provide an identity for processes running in a pod

    2. To manage external user logins

    3. To define network policies

    4. To store application secrets

    Show answer and explanation

    Correct answer

    • To provide an identity for processes running in a pod

    ServiceAccounts provide an identity for workloads running in pods, enabling them to interact with the API and other resources based on assigned roles. They are not primarily for user authentication or secret storage.

  6. Question 6

    Link to question

    Which OpenShift feature allows you to apply configuration changes to multiple namespaces at once?

    1. MultiClusterEngine

    2. NamespaceSelector

    3. ClusterPolicy

    4. ProjectRequest

    Show answer and explanation

    Correct answer

    • ClusterPolicy

    Cluster-level policies and configurations can be propagated to multiple namespaces, enabling consistent governance across groups of projects without manual per-namespace updates.

  7. Question 7

    Link to question

    What does the 'oc new-app' command do?

    1. Creates a new application from source code or an image

    2. Deletes an existing application

    3. Updates cluster-wide settings

    4. Monitors application logs

    Show answer and explanation

    Correct answer

    • Creates a new application from source code or an image

    The 'oc new-app' command streamlines the creation of applications by setting up builds, deployments, and services in a single step. It is a productivity tool for rapid application provisioning.

  8. Question 8

    Link to question

    Which resource is best suited for running short-lived, batch-oriented tasks?

    1. Deployment

    2. DaemonSet

    3. Job

    4. StatefulSet

    Show answer and explanation

    Correct answer

    • Job

    Jobs are designed to run to completion, making them ideal for batch processing or tasks that should not run indefinitely. They ensure a specified number of pods successfully terminate.

  9. Question 9

    Link to question

    What is the purpose of an ImageStream in OpenShift?

    1. To store large binary files outside the cluster

    2. To provide a pointer to an external image registry

    3. To track image tags and updates for automated deployments

    4. To encrypt container images at rest

    Show answer and explanation

    Correct answer

    • To track image tags and updates for automated deployments

    ImageStreams monitor image repositories for new tags and updates, enabling automatic triggers for new builds or deployments when the upstream image changes.

  10. Question 10

    Link to question

    Which strategy allows zero-downtime deployments by running old and new versions simultaneously?

    1. Recreate

    2. Rolling

    3. Blue-Green

    4. Custom

    Show answer and explanation

    Correct answer

    • Rolling

    The Rolling strategy incrementally replaces pods with new versions, ensuring that the application remains available throughout the deployment process.

  11. Question 11

    Link to question

    What does a ConfigMap help you manage?

    1. Cluster authentication tokens

    2. Non-confidential configuration data for applications

    3. Persistent database connections

    4. Network bandwidth allocation

    Show answer and explanation

    Correct answer

    • Non-confidential configuration data for applications

    ConfigMaps decouple configuration artifacts from image content, allowing you to inject environment-specific settings into pods without rebuilding container images.

  12. Question 12

    Link to question

    Which resource definition is used to enforce security restrictions on pods?

    1. NetworkPolicy

    2. LimitRange

    3. SecurityContext

    4. PodSecurityAdmission

    Show answer and explanation

    Correct answer

    • PodSecurityAdmission

    Pod Security Admission (and related policies) enforce rules that restrict what a pod can do, such as running as root or using privileged containers.

  13. Question 13

    Link to question

    What is the main benefit of using Operators in OpenShift?

    1. To reduce the number of required nodes

    2. To automate the management of complex applications

    3. To replace the need for container images

    4. To provide a graphical user interface for all tasks

    Show answer and explanation

    Correct answer

    • To automate the management of complex applications

    Operators extend the Kubernetes control plane to automate the lifecycle of stateful or complex applications, including installation, upgrades, and recovery.

  14. Question 14

    Link to question

    Which command would you use to check the current user's permissions in a project?

    1. oc policy can-i

    2. oc auth review

    3. oc get role

    4. oc whoami

    Show answer and explanation

    Correct answer

    • oc policy can-i

    The 'oc policy can-i' command tests whether the current user can perform a specific action in a namespace, helping to verify role-based access controls.

  15. Question 15

    Link to question

    What is a common use case for OpenShift Pipelines?

    1. To manage long-running background services

    2. To automate the build, test, and deployment workflow

    3. To store application logs centrally

    4. To define persistent volume claims

    Show answer and explanation

    Correct answer

    • To automate the build, test, and deployment workflow

    OpenShift Pipelines, based on Tekton, enable continuous integration and delivery by orchestrating steps like building, testing, and deploying applications automatically.

Read all flashcards

Recall the answer before opening each card.

What resource defines how source code is compiled into a container image?

BuildConfig. It automates the build process using strategies like Source-to-Image (S2I) or Docker, and can be triggered by image changes or webhooks.

Which OpenShift object creates parameterized environments for testing?

Template. It defines a set of resources with parameters that can be instantiated multiple times, ideal for ephemeral test environments.

How do you expose a service externally with a hostname?

Create a Route. A Route provides a DNS hostname and optional TLS termination, directing external traffic to the service.

Which command shows status of the most recent build of a BuildConfig?

oc describe build. It displays the build phase, events, and logs, helping troubleshoot build failures.

What provides an identity for processes inside a pod?

ServiceAccount. It allows the pod to authenticate to the API server and perform actions based on assigned roles.

How to apply configuration changes to multiple namespaces at once?

Use a ClusterPolicy. Cluster-level policies propagate settings to all namespaces, ensuring consistent governance.

What does `oc new-app` do?

Provisions a new application from source or image, automatically creating BuildConfig, Deployment, and Service in one command.

Which workload type is best for batch jobs that run to completion?

Job. It ensures a specified number of pods successfully terminate, ideal for batch processing or one-time tasks.

What tracks image tags and triggers updates automatically?

ImageStream. It monitors a container registry for new tags and can trigger builds or deployments when the image changes.

Which deployment strategy updates pods incrementally and avoids downtime?

Rolling. It replaces old pods with new ones gradually, controlling the rate with maxSurge and maxUnavailable.

How to separate app configuration from container image?

Use a ConfigMap. It stores non-sensitive configuration data that can be injected as environment variables or volumes into pods.

Which resource enforces security restrictions on pods?

PodSecurityAdmission. It enforces pod security standards (privileged, baseline, restricted) at the namespace level.

What automates lifecycle management of complex applications?

Operators. They extend the Kubernetes API to automate installation, scaling, backup, and recovery of stateful applications.

How to check if current user can perform an action in a project?

Run `oc policy can-i `. It tests RBAC permissions and helps debug authorization issues.

What is OpenShift Pipelines based on?

Tekton. It provides a cloud-native, declarative framework for CI/CD pipelines as Kubernetes custom resources.

What is a benefit of using Templates for application deployment?

Parameterization allows creating multiple isolated environments quickly from a single template, reducing manual effort.

What does a Route provide besides hostname?

Load balancing. A Route distributes incoming external traffic across the pods backing the destination service.

What is the difference between a Secret and a ConfigMap?

ConfigMap stores plain-text non-confidential configuration. Secret stores sensitive data (e.g., passwords) in base64-encoded form.

What is a common use case for OpenShift Pipelines?

Automating CI/CD workflows: building code, running tests, and deploying to production in a declarative, repeatable manner.

Why use an ImageStream instead of referencing a registry image directly?

ImageStream triggers automatic builds or deployments when the upstream image tag is updated, ensuring the latest image is used.

Active recall deck

Practice Red Hat Certified Specialist in OpenShift Automation and Integration with real flashcards

Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.

20 free cards

Card 1 of 20

1 reviewed this session

Connect the concepts

Your Red Hat Certified Specialist in OpenShift Automation and Integration study mind map

Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.

Red Hat Certified Specialist in OpenShift Automation and Integration15 questions in this practice set
Understand core OpenShift application build mechanisms(1)
Use OpenShift objects to support development workflows(1)
Expose applications securely and reliably(1)
Monitor and troubleshoot builds effectively(1)
Implement least-privilege access for workloads(1)
Manage configurations across large-scale deployments(1)
Rapidly provision applications using CLI(1)
Select appropriate workload types for task duration(1)
Integrate image management with deployment workflows(1)
Choose deployment strategies to meet availability requirements(1)
Manage application configuration separately from code(1)
Implement security controls at the workload level(1)
More practice connections(3)
Exam-focused analysis

What this Red Hat Certified Specialist in OpenShift Automation and Integration practice set measures

This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.

Resource Selection and Use Cases

This section assesses the ability to choose the correct OpenShift resource for specific scenarios, such as building images, creating temporary test environments, exposing services externally, or running batch tasks. It requires understanding the primary purpose and lifecycle of each resource.

  • BuildConfig automates container image creation from source code.
  • Templates create parameterized, ephemeral environments for testing.
  • Routes expose services externally via hostnames with load balancing.
  • Jobs run short-lived, batch-oriented tasks to completion.

Configuration and Security Management

This section focuses on managing application configuration and enforcing security. It covers ConfigMaps for non-confidential data, ServiceAccounts for pod identity, PodSecurityAdmission for restricting pod capabilities, and Cluster-level policies for consistent governance across namespaces.

  • ConfigMaps decouple configuration from container images.
  • ServiceAccounts provide identity for workloads to access the API.
  • PodSecurityAdmission enforces security restrictions on pods.
  • ClusterPolicy applies configuration changes to multiple namespaces.

Deployment and Lifecycle Automation

This section evaluates knowledge of deployment strategies and lifecycle automation. It includes rolling deployments for zero-downtime updates, ImageStreams for triggering builds when images change, Operators for automating complex applications, and OpenShift Pipelines for CI/CD workflows.

  • Rolling strategy incrementally replaces pods for zero-downtime.
  • ImageStreams track image tags and trigger automated rebuilds.
  • Operators manage lifecycles of stateful applications.
  • OpenShift Pipelines (Tekton) automate build, test, and deploy.

CLI and Monitoring Commands

This section tests proficiency with essential OpenShift CLI commands for provisioning, monitoring, and troubleshooting. It emphasizes rapid application creation, build status inspection, and permission verification, which are critical for day-to-day operations.

  • oc new-app creates an application from source or image in one step.
  • oc describe build provides detailed status of a specific build.
  • oc policy can-i checks user permissions for actions in a project.
  • oc get and oc logs are used for general monitoring.

Study workflow

Turn one Red Hat Certified Specialist in OpenShift Automation and Integration attempt into a study plan

  1. 1

    Provision an Application with oc new-app

    Use `oc new-app` to quickly create an application from a Git repository or container image. Specify the source with `--code`, and optionally add labels with `-l`. The command automatically creates a BuildConfig, Deployment, and Service. Verify with `oc get pods` and `oc get svc`.

  2. 2

    Create a ConfigMap and Inject into a Pod

    Create a ConfigMap from a file or literal using `oc create configmap my-config --from-file=config.properties`. In a deployment, reference the ConfigMap as a volume or environment variable via the pod spec. This decouples configuration from the image.

  3. 3

    Set Up a Rolling Deployment Strategy

    Edit a Deployment's spec.strategy to `type: RollingUpdate`. Configure `maxSurge` and `maxUnavailable` to control the pace. This ensures pods are replaced incrementally, maintaining availability. Test by updating the image and watch with `oc rollout status deployment/myapp`.

  4. 4

    Use an ImageStream to Trigger a Build

    Create an ImageStream with `oc create imagestream myis`. Then in a BuildConfig, set `output.to.kind: ImageStreamTag` and `triggers.imageChange`. When the upstream image updates, the BuildConfig automatically starts a new build and deployment.

  5. 5

    Check Permissions with oc policy can-i

    Run `oc policy can-i create pods` to verify if the current user can create pods in the active project. You can also specify a namespace with `-n`. This command helps debug RBAC issues before troubleshooting workloads.

FAQ

Questions about this exam practice page

Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.

What is the difference between a BuildConfig and an ImageStream in OpenShift?+

A BuildConfig defines how to build a container image from source code (e.g., S2I or Docker). An ImageStream tracks image tags and can trigger new builds or deployments when the upstream image changes. They often work together: the BuildConfig outputs to an ImageStream, which then triggers deployments.

How does the Rolling deployment strategy ensure zero-downtime?+

The Rolling strategy incrementally replaces old pods with new ones, keeping a minimum number of available pods. By controlling `maxSurge` (extra pods) and `maxUnavailable` (allowed unavailable pods), it ensures the application remains accessible during the update.

Why would you use a Template instead of manually creating resources?+

Templates parameterize resource definitions, allowing you to create multiple environments (dev, test, prod) with different settings from a single definition. This reduces manual effort and ensures consistency across deployments.

What is the purpose of a ServiceAccount?+

A ServiceAccount provides an identity for processes running in a pod. It allows the pod to authenticate to the Kubernetes API and perform authorized actions. Roles and RoleBindings grant specific permissions to ServiceAccounts, enabling fine-grained access control.

How do OpenShift Pipelines differ from traditional Jenkins pipelines?+

OpenShift Pipelines are based on Tekton and run as Kubernetes CRDs, making them cloud-native and declarative. They offer better integration with OpenShift resources, serverless execution of tasks, and easier scaling compared to a standalone Jenkins server.

Keep studying

Build the next review session

Browse another free bank or use the study strategy guide to turn your misses into spaced review.

All free testsStudy strategy