Practice Free EX432 Exam Online Questions
Question #11
SIMULATION
Task 24
Deploy an application using Subscription + PlacementRule (legacy model)
Correct Answer: Create a Channel (Git) and Subscription referencing it (example pattern).
In exams, you’re usually given a repo URL and target namespace.
Ensure there is a placement rule/placement selecting clusters.
Apply manifests:
oc apply -f channel.yaml
oc apply -f subscription.yaml
Verify resources:
oc get channels.apps.open-cluster-management.io -A
oc get subscriptions.apps.open-cluster-management.io -A oc get application.app.k8s.io -A
Why this matters:
Multi-cluster application lifecycle is part of ACM operations, and EX480 explicitly covers managing
multi-cluster environments with ACM.
In exams, you’re usually given a repo URL and target namespace.
Ensure there is a placement rule/placement selecting clusters.
Apply manifests:
oc apply -f channel.yaml
oc apply -f subscription.yaml
Verify resources:
oc get channels.apps.open-cluster-management.io -A
oc get subscriptions.apps.open-cluster-management.io -A oc get application.app.k8s.io -A
Why this matters:
Multi-cluster application lifecycle is part of ACM operations, and EX480 explicitly covers managing
multi-cluster environments with ACM.
Question #12
SIMULATION
Task 7
Grant Admin Access to User A (ClusterSet admin for production)
Correct Answer: Grant the role:
oc adm policy add-cluster-role-to-user open-cluster-management:managedclusterset:admin:production user-a
Confirm the binding:
oc get clusterrolebinding | grep -i production | grep -i user-a
Why this matters:
ACM provides ClusterSet-scoped roles. This grants admin permissions limited to the production ClusterSet (instead of full cluster-admin).
oc adm policy add-cluster-role-to-user open-cluster-management:managedclusterset:admin:production user-a
Confirm the binding:
oc get clusterrolebinding | grep -i production | grep -i user-a
Why this matters:
ACM provides ClusterSet-scoped roles. This grants admin permissions limited to the production ClusterSet (instead of full cluster-admin).
Question #13
SIMULATION
Task 33
Create a “deny” baseline policy: ensure a prohibited Namespace does NOT exist
Correct Answer: Create a ConfigurationPolicy using mustnothave complianceType (common policy pattern).
Bind to placement.
Confirm noncompliance if the namespace exists; enforce removes it if remediation is enforce.
Bind to placement.
Confirm noncompliance if the namespace exists; enforce removes it if remediation is enforce.
Question #14
SIMULATION
Task 4
Create Production ClusterSet
Correct Answer: Create the ManagedClusterSet:
oc create managedclusterset production
Validate:
oc get managedclusterset
oc describe managedclusterset production
Why this matters:
Separating development and production clusters is common for governance/RBAC isolation.
oc create managedclusterset production
Validate:
oc get managedclusterset
oc describe managedclusterset production
Why this matters:
Separating development and production clusters is common for governance/RBAC isolation.
1 2