EX280 Certification

What the EX280 Credential Actually Is

EX280 is the exam code for the Red Hat Certified System Administrator in OpenShift credential. Red Hat issues the credential, governs it, and delivers the exam. If you are new to the terminology, the explainers on what EX280 certification is and what EX280 stands for cover the basics. The short version is that the exam code stayed the same when the May 11, 2026 framework renamed the credential from Red Hat Certified OpenShift Administrator to Red Hat Certified System Administrator in OpenShift.

That rename matters for one practical reason: older study material, forum threads, and résumé wording may still use the previous title. The exam itself is identified by its code, and the code is what you book. When you search for preparation resources, treat anything that references an older OpenShift release or an older objective grouping with suspicion until you have checked it against the current Red Hat objectives page.

Exam Format: Three Hours, Live Cluster, Documentation Provided

EX280 is not a multiple-choice test. According to the Red Hat exam page, it is a three-hour, hands-on assessment performed against OpenShift 4.22. You are given tasks to complete on a working environment, relevant product documentation is supplied during the exam, and no outside assistance is permitted. The skill being measured is whether you can configure and repair a cluster, not whether you can recognize the right answer from a list.

One requirement shapes how you should practice: configurations and services must remain functional across the normal platform lifecycle without manual restoration. In practice, that means a route, policy, or deployment that works only because of a temporary fix is not finished work. Build the habit of verifying that your change is declarative, persistent, and still correct after pods are rescheduled or resources are reapplied.

What "documentation supplied" changes

Because product documentation is available, memorizing every flag is less important than knowing where to look and how quickly you can adapt an example to the task in front of you. Domain 14, Use product documentation, is listed as an explicit objective for this reason. Practice searching the official OpenShift documentation for a task, finding the relevant procedure, and translating it to your namespace, names, and constraints. The EX280 cheat sheet is useful as a revision aid, but it should supplement documentation fluency rather than replace it.

Task counts and pass marks

Published, verifiable task counts and a confirmed numeric pass mark are not available from the sources this guide relies on, so none are stated here. Red Hat reports total scores, and its handbook also describes objective-area feedback, but neither gives task-by-task detail. For what is and is not known about scoring, see the discussion on the EX280 passing score page.

Reading the Objective List Without Misreading It

The detailed objective list for EX280 contains 64 entries, and they appear in a flat sequence that mixes broad headings with individual tasks. That is the source of a common misunderstanding. The number 64 counts the lines supplied, not a Red Hat claim of 64 official domains, and no hierarchy, percentages, or weightings can be read from it. If you want a walkthrough of each line, the EX280 exam domains guide goes through all of the content areas.

Separately, Red Hat's competency page for the credential lists nine broader headings. All nine are retained among the detailed entries, but the detailed outline goes further and includes Declarative Resource Management, YAML, Kustomize overlays, Helm, jobs, and cron jobs. Do not prepare from the short summary alone, because you would miss material that the detailed objectives explicitly name.

The Skills That Carry the Most Practical Weight

Without official weightings, the sensible approach is to identify which objectives are prerequisites for everything else. Several listed areas are used in nearly every task: working in the web console and the command line, querying and filtering resources, and deploying from manifests.

The objective list also includes the line "Be prepared to perform all tasks of a Red Hat Certified Technologist in OpenShift." Read that as a signal that foundational skills from the lower-level material are fair game and should not be treated as already known. Workloads that run to completion are covered too: deploying jobs for one-time tasks and configuring Kubernetes cron jobs are both named explicitly.

Authentication, Network Security, and Application Security

A large share of the objective list concerns who can do what and how traffic moves. These entries reward careful, hands-on repetition because small mistakes, such as a wrong subject or a missing label, produce failures that are easy to cause and slow to diagnose.

Authentication and authorization

The identity entries are specific. You are expected to configure the HTPasswd identity provider, create and delete users, modify user passwords, create and manage groups, and modify user and group permissions. Practice the full loop: add a user to the identity source, confirm they can log in, grant a role at the right scope, and verify the result by testing as that user. Remember that modifying a password in an HTPasswd-based setup means updating the underlying credential data the provider reads, then ensuring the provider configuration picks it up.

Network security and external access

The networking entries cover a wide range: configuring network security, configuring networking components, creating and editing external routes, controlling cluster network ingress, securing external and internal traffic with TLS certificates, and configuring application network policies. They also extend beyond HTTP, with entries on exposing non-HTTP/SNI applications, configuring a load balancer service, and configuring external application access.

• Know when a route is the right exposure mechanism and when a load balancer service is.
• Practice TLS termination options on routes and how certificates are supplied.
• Write network policies that allow only the intended traffic, then test both the allowed and the denied path.

Application security

Application security entries include configuring and managing service accounts, running privileged applications, managing and applying permissions through security context constraints, creating and applying secrets for sensitive information, and configuring application access to Kubernetes APIs. The recurring pattern is least privilege: give a workload only the service account and constraint it genuinely needs, and be able to explain why a pod was denied admission when an SCC does not permit what it requests.

Operators, Quotas, and Developer Self-Service

The administrator-level entries around governing a shared cluster are easy to underestimate because they feel less dramatic than troubleshooting. They are, however, explicitly listed and well suited to a timed practical exam because each has a clear, checkable end state.

Fees, Delivery, Retakes, and Results

The policy facts below come from Red Hat's program guide, its training and certification FAQs, and its training policies. Review them again at booking time, since the cart controls what you actually pay and what options appear.

For a broader look at budgeting, including how the standard price relates to training spend, see the EX280 certification cost breakdown. For scheduling mechanics, the EX280 exam dates guide covers how availability works. Because the retake benefit carries eligibility conditions, read the policy before you assume it applies to your purchase type.

Recommended background

Red Hat recommends RH124-level skills, DO180 and DO280 or equivalent work experience, and familiarity with containers. RHCSA is strongly recommended but not required. These are recommendations rather than formal gates, and the EX280 requirements article explains the difference between eligibility and readiness. If you are asking how demanding the exam is in practice, the difficulty guide addresses that directly, and the pass rate article explains why no verified pass-rate figure is quoted here.

Renewal and the Path Toward RHCE in OpenShift

Under the policy sources reviewed, certifications are current for three years. You renew before expiry either by retaking the original exam or by earning a qualifying same-level or higher-level credential under the current framework. For credentials earned before the May 11, 2026 framework, the FAQ says updated renewal and mapping rules apply to the active transcript after a new exam is passed following that date.

EX280 combined with EX380 is the route to Red Hat Certified Engineer in OpenShift. That path is a reason to plan ahead, not a reason to study EX380 material for this exam. Keep your EX280 preparation anchored to the EX280 objectives, and do not pull in EX380 topics or older syllabus groupings from earlier OpenShift releases.

Sequencing Your Preparation Around the Objectives

Rather than a generic schedule, order your practice by dependency: the early skills are used by every later task. The outline below is one reasonable ordering built from the objective list, and the EX280 study guide expands on it with more detail. Adjust the pacing to your own experience.

Spend your final sessions on mixed, timed scenarios rather than isolated topics, since the real exam mixes areas freely. Original practice material is the right tool here; the practice test site offers original questions and scenarios written for this purpose, and the broader EX280 Exam Prep home page links to additional resources. Any lab or mock project you build should be your own design, not an attempt to recreate actual exam tasks.

Who Values This Credential

The credential maps to roles that administer OpenShift clusters: platform engineers, cluster administrators, site reliability engineers, and operations staff supporting containerized workloads, particularly in organizations already invested in Red Hat's ecosystem. Because the exam is performance-based, it signals hands-on ability, which some employers weigh more heavily than a knowledge-only test. Listings vary widely, though, and a certification does not by itself guarantee interviews or offers.

For market-side questions, look at current job postings directly. The EX280 jobs page discusses the kinds of roles that reference the credential. On compensation, no earnings figures are asserted here, because pay depends on region, seniority, employer, and the rest of your skill set rather than on the certificate alone. The salary guide and the ROI analysis treat that question with the caution it deserves. If you also work with upstream Kubernetes, remember that the exam emphasizes OpenShift-specific administration such as routes, SCCs, operators, and project governance on top of core Kubernetes concepts.

Frequently Asked Questions