- The EX280 Snapshot: Format, Cost and Logistics
- Confirm Your Exam Version First
- Cluster Operations, Images and Diagnostics
- Declarative Deployments: YAML, Kustomize, Helm
- Configuration, Scaling, Services and Jobs
- Identity, Users, Groups and Permissions
- Networking, Routes, TLS and Network Policies
- Self-Service, Quotas, Limits and Operators
- Service Accounts, SCCs and Secrets
- Lifecycle Rules: Results, Retakes and Renewal
- Sequencing Your Last Weeks
- Quick Answers (FAQ)
- EX280 is Red Hat's three-hour, hands-on OpenShift 4.22 exam with product documentation supplied and no outside assistance.
- Your work must stay functional across the normal platform lifecycle without manual restoration, so persistence matters as much as getting a task to run.
- The retrieved objective list has 64 flat entries; these are not 64 official weighted domains.
- Confirm your designated exam version in the booking or LMS before studying; multiple versions are in use.
The EX280 Snapshot: Format, Cost and Logistics
EX280 is the exam for the Red Hat Certified System Administrator in OpenShift. Red Hat retained the EX280 exam code in its May 11, 2026 framework while updating the credential name from Red Hat Certified OpenShift Administrator. If you are new to the credential, What Is EX280 Certification? covers the background. This page compresses the facts you most need on exam week.
| Item | What to remember |
|---|---|
| Issuer and delivery | Red Hat, Inc., through Red Hat exam delivery |
| Format | Three-hour, hands-on assessment on OpenShift 4.22 |
| Resources | Relevant product documentation is supplied; no outside assistance |
| Scoring rule | Configurations and services must remain functional across the normal platform lifecycle without manual restoration |
| List price | USD 500 program-wide standard; your regional booking-cart price controls |
| Delivery options | Remote, testing center or classroom, subject to booking availability |
| Remote requirements | LiveUSB, a successful compatibility test, and identity and hardware checks |
| Recommended background | RH124-level skills, DO180 and DO280 or equivalent experience, and container familiarity; RHCSA strongly recommended but not required |
For a fuller pricing breakdown, see EX280 Certification Cost 2026, and for eligibility details read EX280 Requirements 2026. Notice what is absent from this table: Red Hat's published materials we rely on do not give a verified task count, pass mark or pass-rate statistic, so treat any number you see quoted elsewhere with suspicion. EX280 Passing Score 2026 and EX280 Pass Rate 2026 explain what can and cannot be stated.
Confirm Your Exam Version First
The live exam page describes OpenShift 4.22, but multiple exam versions are in use. Red Hat links a document titled "Red Hat Certification Exam Objectives by Version," which we could not retrieve (it returned an access error), so we cannot tell you what differs between versions. Do not guess. Open your booking or LMS record and confirm the designated version before you build your lab.
There is a similar wrinkle on the preparation side. The DO280 course page specifies OpenShift 4.22, while the DO281 course-with-exam page still specifies OpenShift 4.18. Course pages describe preparation curriculum, not weighted exam blueprints, so use them as practice material rather than as an exhaustive statement of what the exam covers. Also resist importing an older 4.14 quiz syllabus or any EX380 objectives into your plan; EX280 plus EX380 is the path to Red Hat Certified Engineer in OpenShift, but EX380 content is not EX280 content.
Cluster Operations, Images and Diagnostics
The objective list opens with Manage OpenShift Container Platform, split into using the web console and the command-line interface to manage and configure a cluster. You should be comfortable doing the same job in both, because the faster tool varies by task.
Projects, Images and Resource Queries
These entries are small but show up inside almost every larger task.
- Create and delete projects cleanly from the CLI and console.
- Locate and examine container images, then identify images using tags and digests. Know why a digest is immutable and a tag is not.
- Query, format, and filter attributes of Kubernetes resources using output formatting and filtering rather than scrolling through full YAML.
- Import, export, and configure Kubernetes resources so you can capture a live object and modify it.
Examining, Monitoring and Troubleshooting
The objectives group status and diagnostics together, and they are the fastest way to recover lost time.
- Examine resources and cluster status and assess the health of an OpenShift cluster.
- Monitor cluster events and alerts and view logs.
- Troubleshoot common container, pod, and cluster events and alerts, building a repeatable sequence: status, events, logs, then describe.
- Use product documentation. Because documentation is supplied, practice finding the right page quickly instead of memorizing syntax.
One entry deserves a careful read: "Be prepared to perform all tasks of a Red Hat Certified Technologist in OpenShift." That line signals that foundational tasks are fair game even when they are not repeated in the detailed list. For a breakdown of how the entries group together, read EX280 Exam Domains 2026: Complete Guide to All 64 Content Areas.
Declarative Deployments: YAML, Kustomize, Helm
The detailed outline includes a block on Declarative Resource Management that the shorter nine-heading competency summary on Red Hat's site does not spell out. It covers YAML, Kustomize overlays, Helm, jobs and cron jobs. Candidates who studied only from the summary risk skipping it.
Manifests and Updates
The core skills are authoring and applying resource manifests and updating what is running.
- Work with resource manifests and deploy applications from YAML resource manifests.
- Update application deployments and verify the rollout completed, not merely that the command returned.
Kustomize and Helm
Know what each tool is for before the clock starts.
- Deploy applications using Kustomize and work with Kustomize overlays: a shared base with environment-specific patches layered on top.
- Deploy applications from templates and Helm charts: inspect what a chart or template produces before installing it, and confirm the resulting resources.
Configuration, Scaling, Services and Jobs
This cluster of entries covers how an application gets its settings, scales, and becomes reachable.
- Create and use secrets and create and use configuration maps: know how each is injected into a pod, as environment variables or as mounted files, and what happens to a running pod when the source changes.
- Deploy applications and manage application deployments, including work with replica sets.
- Work with labels and selectors: a mismatched selector is a classic silent failure for services and routes.
- Configure services and expose applications to external access.
- Deploy jobs to perform one-time tasks and configure Kubernetes cron jobs: schedule syntax, completion behavior and how to read job status.
Identity, Users, Groups and Permissions
The authentication and authorization block is highly procedural and rewards repetition.
Authentication and Authorization
The exam names a specific identity provider, so prepare for it specifically.
- Configure the HTPasswd identity provider for authentication: create the credentials file, store it as a cluster secret, and update the OAuth configuration.
- Create and delete users and modify user passwords. Remember that removing a user is not the same as removing the identity record behind it.
- Create and manage groups, then modify user and group permissions through role bindings.
Practice verifying access from the user's side: log in as the account you just created and confirm what it can and cannot do. A permission you never tested is a permission you assume.
Networking, Routes, TLS and Network Policies
Networking is the largest cluster of entries in the outline, which makes it the area to over-prepare.
Routes, Ingress and TLS
Be able to expose HTTP applications and secure them.
- Create and edit external routes and control cluster network ingress.
- Secure external and internal traffic using TLS certificates. Know the practical differences between edge, passthrough and re-encrypt termination.
- Configure external application access.
Policies, Troubleshooting and Non-HTTP Traffic
Not everything is a route.
- Configure network security, configure networking components and troubleshoot software defined networking.
- Configure application network policies: write allow rules by namespace and pod selector and verify that denied traffic is actually denied.
- Expose non-HTTP/SNI applications and configure a load balancer service for traffic that does not fit the route model.
Self-Service, Quotas, Limits and Operators
These entries test whether you can run a shared cluster responsibly, not just deploy one app.
| Objective area | What you should be able to do |
|---|---|
| Enable developer self-service | Let permitted users create projects and shape what new projects start with |
| Configure project templates | Edit the template so new projects inherit defaults such as quotas or limits |
| Cluster resource quotas and project quotas | Constrain consumption across projects or within one, and read quota usage |
| Project resource requirements and limit ranges | Set requests and limits, and understand how defaults apply to pods that omit them |
| Manage OpenShift operators | Install an operator, uninstall it, and delete it, noting that these are listed as separate entries |
The operator entries are worth a note: install, uninstall and delete appear separately, so rehearse the full lifecycle and verify what remains afterward, rather than assuming removing the subscription cleans everything up.
Service Accounts, SCCs and Secrets
The final functional block concerns application security.
- Configure and manage service accounts and grant them only what a workload needs.
- Manage and apply permissions using security context constraints, and run privileged applications only when the task requires it. Know how to find which SCC admitted a pod and why another was rejected.
- Create and apply secrets to manage sensitive information.
- Configure application access to Kubernetes APIs, typically through a service account with an appropriate role binding.
Key Takeaway
Application failures in this area usually show up as pod admission errors or forbidden API responses. Read the event message and the reported SCC or permission, then fix the service account or binding rather than loosening security broadly.
Lifecycle Rules: Results, Retakes and Renewal
Several administrative facts belong on any one-page review, along with the places where Red Hat's own sources differ.
- Results timing: the exam page says usually three U.S. business days, while the program guide allows five business days. Plan around the longer window.
- Score reporting: the exam page describes total scores; the handbook also describes objective-area feedback. Neither provides task-by-task performance details.
- Retake: eligible unsuccessful first individual attempts receive one free retake under Red Hat's training policies, subject to purchase or subscription eligibility periods and scheduling restrictions.
- Currency: certifications are current for three years. Renew before expiry through the original exam or qualifying same-level or higher-level credentials under the current framework.
- Older credentials: for pre-framework credentials, the FAQ says updated renewal and mapping rules apply to the active transcript after you pass a new exam following May 11, 2026.
Scheduling questions are covered in EX280 Exam Dates 2026, and the career side in EX280 Salary Guide 2026 and Is the EX280 Certification Worth It?. Those pages should rest on attributable market evidence; no certification guarantees a particular salary or job.
Sequencing Your Last Weeks
If you have a few weeks left, schedule by dependency rather than by the order of the outline. Work that other tasks build on goes first. For a longer plan, see the EX280 Study Guide 2026, and to judge your readiness against effort, read How Hard Is the EX280 Exam?
Foundations and diagnostics
- Projects, image tags and digests, resource querying and output filtering
- Events, logs and health checks, because every later week depends on them
Declarative deployment and configuration
- YAML manifests, Kustomize overlays, Helm and templates
- Secrets, config maps, labels, selectors, services, jobs and cron jobs
Identity and networking
- HTPasswd provider, users, groups and role bindings
- Routes, TLS, network policies and load balancer services
Governance, security and timed runs
- Quotas, limit ranges, project templates, operators, service accounts and SCCs
- Full timed sessions using only the documentation, with every result checked after a restart
Build your practice scenarios yourself and keep them original; do not rely on remembered or reconstructed exam tasks. To check your readiness with fresh questions, try the EX280 practice tests. Structured courses are discussed on the EX280 training page, and employer demand is covered in EX280 Jobs.
Quick Answers (FAQ)
EX280 is the exam code for the Red Hat Certified System Administrator in OpenShift, previously named Red Hat Certified OpenShift Administrator. Red Hat kept the code when it updated the name in its May 11, 2026 framework. See What Does EX280 Stand For? for more.
No. It is a three-hour, hands-on assessment on OpenShift 4.22 in which you perform tasks on live systems, with relevant product documentation supplied and no outside assistance.
Red Hat's program-wide standard list price is USD 500, but the regional price shown in your booking cart controls, so confirm it at checkout rather than treating USD 500 as an exam-specific quote.
The retrieved objective list contains 64 flat entries mixing broad labels and individual tasks. That count reflects the supplied lines, not 64 official weighted domains, and no percentages are published in the sources we rely on.
RHCSA is strongly recommended but not required. Red Hat also recommends RH124-level skills, DO180 and DO280 or equivalent experience, and container familiarity. Details are in EX280 Requirements 2026.
Certifications are current for three years. Renew before expiry through the original exam or a qualifying same-level or higher-level credential, and check your active transcript for how current rules apply to you.