EX380 시험 - RedHat실제시험문제와 답 - 80문항

Question No : 1

In LDAP configuration, what does the insecure parameter control?

A.Enables password-less login
B.Disables TLS verification
C.Allows anonymous access
D.Disables synchronization

정답:
Explanation:
The insecure parameter, when set to true, disables TLS verification for LDAP connections.

Question No : 2

Which protocol should be used in the url field for a secure LDAP connection?

A.http://
B.ldap://
C.ldaps://
D.ftp://

정답:
Explanation:
ldaps:// is the protocol used for secure LDAP connections.

Question No : 3

Which command synchronizes OpenShift groups with LDAP groups?

A.oc create groups
B.oc adm groups sync
C.oc sync groups
D.oc update groups

정답:
Explanation:
The oc adm groups sync command synchronizes group membership from LDAP to OpenShift.

Question No : 4

Which LDAP parameter defines the Distinguished Name (DN) used for binding to the directory?

A.url
B.bindDN
C.ca
D.syncGroups

정답:
Explanation:
The bindDN specifies the DN of the account used to query the LDAP server.

Question No : 5

Which OpenShift file is modified to configure LDAP integration?

A.kube-apiserver.yaml
B.oauth.yaml
C.master-config.yaml
D.kubelet-config.yaml

정답:
Explanation:
LDAP identity providers are configured in oauth.yaml to define authentication settings in OpenShift

Question No : 6

How do you update the OAuth configuration to add a new identity provider?

A.oc apply -f oauth.yaml
B.oc edit oauth
C.oc update idp
D.oc create configmap

정답:
Explanation:
oc edit oauth opens the current OAuth configuration for editing, allowing you to add a new identity provider.

Question No : 7

What is the purpose of the clientSecret in the OIDC configuration?

A.Encrypt user data
B.Authenticate the client with the OIDC provider
C.Manage API access tokens
D.Define group mappings

정답:
Explanation:
The clientSecret is used to authenticate the OpenShift cluster with the OIDC provider (Keycloak).

Question No : 8

What must be created in Keycloak to enable OIDC integration with OpenShift?

A.Realm and Client
B.ServiceAccount and ConfigMap
C.Role and RoleBinding
D.Project and Pod

정답:
Explanation:
You need to create a Realm and a Client in Keycloak for proper OIDC integration.

Question No : 9

Which OpenShift role allows a user to manage resources within a specific namespace?

A.cluster-admin
B.admin
C.edit
D.view

정답:
Explanation:
The admin role allows full management of resources within a specific namespace.

Question No : 10

What are two necessary components in the oauth.yaml file for OIDC configuration with Keycloak?

A.issuerURL
B.clientID
C.groupFilter
D.bindDN

정답:
Explanation:
issuerURL points to the Keycloak server, and clientID identifies the OpenShift cluster as a client to Keycloak.

Question No : 11

Which protocol does OpenShift use to communicate with Keycloak for authentication?

A.SAML
B.LDAP
C.OIDC
D.Kerberos

정답:
Explanation:
OpenShift uses the OpenID Connect (OIDC) protocol to integrate with Keycloak for authentication.

Question No : 12

Which OpenShift command lists configured identity providers?

A.oc get oauth
B.oc describe idp
C.oc get auth
D.oc get configmap

정답:
Explanation:
oc get oauth displays the configured identity providers for the OpenShift cluster.

Question No : 13

Which component in Keycloak defines the applications allowed to authenticate?

A.Realm
B.Client
C.User Federation
D.Identity Provider

정답:
Explanation:
A Client in Keycloak represents an application that can request authentication and authorization.

Question No : 14

In OIDC configuration, what does the issuerURL parameter specify?

A.The URL of the OpenShift API server
B.The URL of the Keycloak server’s token issuer
C.The LDAP server address
D.The cluster's public URL

정답:
Explanation:
The issuerURL parameter points to the Keycloak server's endpoint that issues tokens for validation.

Question No : 15

Which OpenShift resource type is used to define integration with Keycloak as an OIDC provider?

A.ConfigMap
B.OAuth
C.RoleBinding
D.Secret

정답:
Explanation:
The OAuth resource type in OpenShift defines how the cluster integrates with identity providers like Keycloak.

RedHat EX380 시험