EX380 Exam Preparation Material | Red Hat Certified Specialist in OpenShift Automation and Integration exam

Prepare for the EX380 with reliable study materials, practice questions, and key exam insights.

Prepare for the EX380 Red Hat Certified Specialist in OpenShift Automation and Integration exam with CertQueen's independently developed study resources. Review important concepts, practice scenario-based questions, and use clear explanations to identify areas that require further study.

Question#1

SIMULATION
Task SIMULATION 3
Integrate OpenShift with Keycloak (OIDC)
Task Information: Add a Keycloak (RH SSO) OpenID Connect identity provider to OpenShift OAuth and verify redirect/login works.

A. Collect Keycloak details
Issuer URL (realm), client ID, and client secret.
Confirm Keycloak client has correct redirect URI for OpenShift OAuth callback.
Create a secret with the OIDC client secret
oc -n openshift-config create secret generic keycloak-oidc-secret \ --from-literal=clientSecret='<SECRET>'
OAuth reads the OIDC client secret from this secret.
Edit OAuth and add OpenID provider
oc edit oauth cluster
Add under spec.identityProviders:
- name: keycloak
mappingMethod: claim
type: OpenID openID:
issuer: "https://keycloak.example.com/realms/ocp"
clientID: "openshift" clientSecret:
name: keycloak-oidc-secret claims:
preferredUsername: ["preferred_username"]
name: ["name"]
email: ["email"]
issuer must match Keycloak realm issuer URL.
claims determines which token claims map to OpenShift username/name/email.
Restart OAuth pods
oc -n openshift-authentication delete pod -l app=oauth-openshift
Verify by logging in through the web console
You should be redirected to Keycloak, authenticate, then return to OpenShift.
Confirm users/identities:
oc get users
oc get identities

Question#2

SIMULATION
Task SIMULATION 5
Backup and Restore C Fix SCC for Restored Application

A. Step 1: Identify the application namespace after restore.
The lab shows the namespace as my-app-namespace.
Step 2: Run the SCC assignment command:
oc adm policy add-scc-to-user anyuid -z default -n my-app-namespace
Step 3: Confirm the role binding is applied.
The lab output shows:
clusterrole.rbac.authorization.k8s.io/system:openshift:scc:anyuid added: "default"
Detailed

explanation:
After a restore, the application may fail if its pods require a security context not permitted by the default SCC allocation. This command grants the anyuid SCC to the default service account in the my-
app-namespace project. The -z default syntax targets the default service account, which many restored workloads use if no custom service account is defined. The anyuid SCC allows containers to run with arbitrary user IDs, which some legacy or prebuilt images require. In OpenShift, SCC mismatches commonly cause pods to remain in pending or crash-related states. Assigning the proper SCC resolves those admission issues so workloads can start successfully. This step is therefore a post-restore operational fix to align security policy with application requirements.

Question#3

SIMULATION
Task SIMULATION 16
Export and import container images (mirror to internal registry)
Task Information: Pull an image from an external registry, push it into the OpenShift internal registry, and update a deployment to use the mirrored image.

A. Log in to OpenShift internal registry
oc registry login
Allows podman to push to the internal registry.
Pull external image
podman pull docker.io/library/nginx:1.25
Gets the image locally.
Tag for internal registry destination
podman tag nginx:1.25 image-registry.openshift-image-registry.svc:5000/orders/nginx:1.25 Uses the cluster service DNS name (works inside cluster network). Push to internal registry
podman push image-registry.openshift-image-registry.svc:5000/orders/nginx:1.25 Update deployment to use internal image
oc -n orders set image deploy/web web=image-registry.openshift-image-registry.svc:5000/orders/nginx:1.25
Verify rollout
oc -n orders rollout status deploy/web
oc -n orders get pods -o wide

Question#4

SIMULATION
Task SIMULATION 4
Backup and Restore C Restore Application from Existing Backup

A. Step 1: Make sure Velero is installed and configured in the environment.
The Task SIMULATION assumes an existing backup named backup-app-daily is already present.
Step 2: Run the restore command:
velero restore create --from-backup backup-app-daily
Step 3: Confirm the restore request is submitted.
The lab output shows:
Restore request "backup-app-daily-2024" submitted successfully.
Detailed

explanation:
This command instructs Velero to create a restore operation using the existing backup called backup-app-daily. Velero is commonly used to protect Kubernetes and OpenShift resources by backing up object definitions and, when configured, persistent data integrations. The command does not manually recreate resources one by one; instead, it leverages the metadata captured during backup. A successful restore submission means the request has been accepted, not necessarily that every object has already been fully restored. In practical administration, you would often follow this by checking restore status and validating the application namespace, pods, services, routes, and storage bindings. This lab Task SIMULATION focuses specifically on initiating the restore from the named backup source.

Question#5

SIMULATION
Task SIMULATION 18
Prevent workloads from running on dedicated nodes (taints)
Task Information: Apply a taint to dedicated nodes so only pods with tolerations can run there.

A. Taint nodes
oc adm taint nodes worker-1 dedicated=payments:NoSchedule oc adm taint nodes worker-2 dedicated=payments:NoSchedule NoSchedule blocks new pods that do not tolerate the taint. Confirm taints
oc describe node worker-1 | grep -i taints -A2
Ensures taints are present.
Validate effect
A normal deployment without tolerations will remain Pending if it can only land on those tainted nodes

Exam Code: EX380
Q & A: 42 Q&As Updated: Oct 17,2026

Access Complete EX380 Preparation Material

What This EX380 Study Resource Helps You Do

Review Key Concepts

Review the technologies, products, processes, and practical skills covered by the current EX380 exam objectives.

Practice Scenario-Based Questions

Work through independently developed questions designed to strengthen your understanding of technical scenarios and decision-making.

Identify Knowledge Gaps

Use your results and the provided explanations to find weaker areas and focus your study more effectively.

How to Use This EX380 Preparation Material

Review the Exam Scope

Start by reviewing the topics covered by the EX380 exam. Compare them with the official exam objectives to understand the required technologies, operational tasks, and practical skills, then identify the areas that deserve the most attention.

Practice Independently

Complete a focused set of practice questions for each topic. On your first attempt, avoid referring to notes, answers, or other study resources so that you can evaluate your current understanding more accurately.

Study the Explanations

Review the answers and explanations after completing each practice session. Understand why the correct option is appropriate for the given scenario and why the other options may be incorrect or less suitable.

Close Knowledge Gaps

Keep track of incorrect answers, unfamiliar concepts, and weaker knowledge areas. Review these topics using official documentation and practical experience, then answer the related questions again to reinforce your understanding and monitor your progress.

Independent EX380 Preparation Resource

CertQueen independently develops its certification study materials for educational purposes. The practice questions are not copied from, recalled from, or presented as live or official exam questions.

CertQueen is not affiliated with, endorsed by, sponsored by, or authorized by any certification provider. Certification names, exam codes, product names, and related trademarks are the property of their respective owners and are referenced only for identification and educational purposes.

Exam Code: EX380
Q & A: 42 Q&As
Updated: Oct 17,2026