RedHat Red Hat Certified Specialist in OpenShift Advanced Cluster Management - EX432 Exam Practice Test
Enable and verify ACM "Search" and query for a resource across clusters
Correct Answer:
See the solution below in Explanation.
Explanation:
* Ensure ACM hub components are installed and healthy.
* In ACM console, open Search and query for:
* a namespace name
* a specific deployment
* Validate results show cluster origin and resource details.
Why this matters:
Search is a core ACM operational workflow for multi-cluster visibility.
Explanation:
* Ensure ACM hub components are installed and healthy.
* In ACM console, open Search and query for:
* a namespace name
* a specific deployment
* Validate results show cluster origin and resource details.
Why this matters:
Search is a core ACM operational workflow for multi-cluster visibility.
Create ETCD Encryption Policy (Web Console)
Correct Answer:
See the solution below in Explanation.
Explanation:
* Open the ACM console on the hub.
* Navigate to Governance # Policies .
* Click Create policy .
* Set Name : policy-etcd.
* Choose the policy template/type ETCD Encryption .
* Set Remediation action to enforce .
* inform = report only
* enforce = attempt to automatically remediate to desired state
* Select clusters/ClusterSets to apply (depends on the wizard).
* Click Submit .
* Verify compliance once applied:
* In console, check policy status: Compliant/NonCompliant
* Or via CLI:
* oc get policy -A
* oc describe policy policy-etcd -n < policy-namespace >
Why this matters:
* Governance policies are a core ACM feature for enforcing security baselines across multiple clusters.
Explanation:
* Open the ACM console on the hub.
* Navigate to Governance # Policies .
* Click Create policy .
* Set Name : policy-etcd.
* Choose the policy template/type ETCD Encryption .
* Set Remediation action to enforce .
* inform = report only
* enforce = attempt to automatically remediate to desired state
* Select clusters/ClusterSets to apply (depends on the wizard).
* Click Submit .
* Verify compliance once applied:
* In console, check policy status: Compliant/NonCompliant
* Or via CLI:
* oc get policy -A
* oc describe policy policy-etcd -n < policy-namespace >
Why this matters:
* Governance policies are a core ACM feature for enforcing security baselines across multiple clusters.
Troubleshoot a managed cluster stuck "NotReady" by checking klusterlet/agent components
Correct Answer:
See the solution below in Explanation.
Explanation:
* Check cluster conditions:
oc describe managedcluster cluster-dev
* Check agent namespaces and pods on the managed cluster (common namespace names depend on deployment, but you're looking for ACM/klusterlet agents).
* On hub, check managedclusteraddons and addon health:
oc get managedclusteraddon -n cluster-dev
oc describe managedclusteraddon -n cluster-dev < addon-name >
* Typical fixes: missing pull secret, network/DNS issues, CSR approval issues, etc. (Exam expects you to identify from events/conditions).
Explanation:
* Check cluster conditions:
oc describe managedcluster cluster-dev
* Check agent namespaces and pods on the managed cluster (common namespace names depend on deployment, but you're looking for ACM/klusterlet agents).
* On hub, check managedclusteraddons and addon health:
oc get managedclusteraddon -n cluster-dev
oc describe managedclusteraddon -n cluster-dev < addon-name >
* Typical fixes: missing pull secret, network/DNS issues, CSR approval issues, etc. (Exam expects you to identify from events/conditions).
Install RHACM Operator (Web Console)
Correct Answer:
See the solution below in Explanation.
Explanation:
* Log in to the OpenShift Web Console as a cluster-admin user.
* Go to Operators # OperatorHub .
* OperatorHub is the catalog of available operators.
* In the search box, type: Advanced Cluster Management .
* Click Advanced Cluster Management for Kubernetes (Red Hat ACM).
* Click Install .
* In the install wizard:
* Update channel : choose the recommended/stable channel for your lab.
* Installation mode : typically "All namespaces on the cluster" (default).
* Installed Namespace : select or create open-cluster-management .
* Click Install and wait for the operator to show Succeeded in:
* Operators # Installed Operators .
Why these steps matter:
* Installing the ACM operator creates the CRDs/controllers required to run the Hub components (MultiClusterHub) that manage/import other clusters.
Explanation:
* Log in to the OpenShift Web Console as a cluster-admin user.
* Go to Operators # OperatorHub .
* OperatorHub is the catalog of available operators.
* In the search box, type: Advanced Cluster Management .
* Click Advanced Cluster Management for Kubernetes (Red Hat ACM).
* Click Install .
* In the install wizard:
* Update channel : choose the recommended/stable channel for your lab.
* Installation mode : typically "All namespaces on the cluster" (default).
* Installed Namespace : select or create open-cluster-management .
* Click Install and wait for the operator to show Succeeded in:
* Operators # Installed Operators .
Why these steps matter:
* Installing the ACM operator creates the CRDs/controllers required to run the Hub components (MultiClusterHub) that manage/import other clusters.
Create Overlay Directory (Kustomize)
Correct Answer:
See the solution below in Explanation.
Explanation:
* Create overlay structure:
* mkdir -p overlays/production
* Confirm:
* ls -R overlays
Why this matters:
* Kustomize overlays let you maintain base manifests and environment-specific patches (production vs dev, etc.).
Explanation:
* Create overlay structure:
* mkdir -p overlays/production
* Confirm:
* ls -R overlays
Why this matters:
* Kustomize overlays let you maintain base manifests and environment-specific patches (production vs dev, etc.).