- What EX280 Training Actually Means
- Official Courses vs. Self-Directed Training
- Building a Practice Cluster That Mirrors the Exam
- Training Map: The Exam Objectives in Plain Terms
- Declarative Skills: YAML, Kustomize, and Helm
- Identity, Access, and Permissions Drills
- Networking and Traffic Control Training
- Quotas, Operators, and Application Security
- Sequencing Your Training Weeks
- Logistics That Shape How You Train
- Frequently Asked Questions
- EX280 is a three-hour, hands-on OpenShift 4.22 exam with product documentation supplied, so training must be performance-based, not reading-based.
- Configurations must stay functional across the normal platform lifecycle without manual restoration; train yourself to verify persistence, not just first-run...
- DO280 is the closest Red Hat preparation course, but course topics do not define the exam blueprint.
- Confirm your designated exam version in the booking/LMS, since multiple exam versions are in use.
What EX280 Training Actually Means
EX280 is the exam code for the Red Hat Certified System Administrator in OpenShift credential, issued by Red Hat, Inc. and delivered through Red Hat exam delivery. Following the May 11, 2026 framework update, the exam code stayed the same while the credential name changed from Red Hat Certified OpenShift Administrator. If you are new to the credential itself, the overview at What Is EX280 Certification? covers the basics before you commit to a training plan.
The word "training" can mean three different things for this exam: a formal Red Hat course, a self-built practice routine, or both. What matters is that the exam is a live, three-hour, hands-on assessment on OpenShift 4.22. You are given relevant product documentation and no outside assistance. That format defines what useful training looks like: repeated, timed work at a command line and in a web console, against a real cluster, with the documentation as your only reference.
Official Courses vs. Self-Directed Training
Red Hat recommends RH124-level skills, DO180 and DO280 or equivalent work experience, and familiarity with containers. RHCSA is strongly recommended but not required. For eligibility details, see EX280 Requirements 2026: Eligibility, Prerequisites & How to Qualify.
The supporting preparation course is Red Hat OpenShift Administration II: Configuring a Production Cluster (DO280), which is published for OpenShift 4.22. A related DO281 page, which bundles the course with an exam, still specifies OpenShift 4.18. That discrepancy is worth noticing: if you buy training that targets an older platform release, verify the differences yourself against current documentation rather than assuming everything carries over.
| Approach | Strength | Watch Out For |
|---|---|---|
| DO280 instructor-led or online course | Structured labs, guided coverage of production-cluster administration | Course topics describe preparation curriculum, not a weighted exam blueprint |
| Self-built practice cluster | Unlimited repetition, freedom to break and repair things | Easy to skip uncomfortable topics without an external checklist |
| Combined approach | Course structure plus repetition on your own environment | Requires discipline to retrain the same task until it is fast |
Whichever route you choose, anchor your plan to the exam objectives rather than to a course outline. The course pages explicitly do not establish exhaustive exam coverage, official domain counts, or the version of the exam you purchased. Pair your training with the EX280 Study Guide 2026: How to Pass on Your First Attempt for a broader preparation framework.
Building a Practice Cluster That Mirrors the Exam
Training for a hands-on OpenShift exam without a cluster is like training for a driving test by reading the manual. Aim for an environment where you can create and delete projects, add identity providers, install and remove operators, and break networking on purpose. Whatever you build, keep these principles in mind:
- Match the platform release. The objectives reference OpenShift Container Platform 4.22. Console layouts and API behavior shift between releases, so practice on the version you will be tested on when possible.
- Use only the documentation. Since product documentation is provided during the exam, practice finding answers there rather than in forums, notes, or memory aids. Navigating the documentation quickly is itself an exam skill, and it is one of the listed objectives ("Use product documentation").
- Practice both interfaces. The objectives call for managing a cluster through both the web console and the command-line interface. Alternate between them so neither feels foreign.
- Write your own scenarios. Build original practice tasks from the objective list. Do not rely on, or try to reconstruct, actual exam content; your own scenarios are both more ethical and more useful.
If you want structured self-assessment alongside your lab work, the EX280 practice tests on the main site are a useful complement for checking knowledge gaps between hands-on sessions.
Training Map: The Exam Objectives in Plain Terms
The exam objectives for the live page (OpenShift Container Platform 4.22, reviewed October 14, 2026) are a flat list of 64 entries mixing broad labels and individual tasks, preserved here in source order. That number counts the supplied lines; it does not mean Red Hat defines 64 official domains, and no weighting or hierarchy is implied. For a line-by-line walk-through, see EX280 Exam Domains 2026: Complete Guide to All 64 Content Areas.
A practical way to train is to cluster the flat list into working areas:
Cluster Operation and Observation
Day-to-day administration and diagnosis.
- Manage OpenShift Container Platform; use the web console and the command-line interface
- Create and delete projects
- Query, format, and filter attributes of Kubernetes resources
- Import, export, and configure Kubernetes resources
- Examine resources and cluster status; monitor cluster events and alerts; view logs
- Assess the health of an OpenShift cluster
- Troubleshoot common container, pod, and cluster events and alerts
Images and Documentation
Where container content comes from and how to find answers.
- Locate and examine container images
- Identify images using tags and digests
- Use product documentation
One entry deserves a note: "Be prepared to perform all tasks of a Red Hat Certified Technologist in OpenShift" appears in the objective list. Treat it as a reminder that foundational tasks are fair game, so do not skip basics because they feel too simple.
Declarative Skills: YAML, Kustomize, and Helm
The detailed outline for this exam goes beyond the nine broader headings on Red Hat's competency page. It also includes Declarative Resource Management, YAML, Kustomize overlays, Helm, jobs, and cron jobs. Candidates who train only from the shorter summary can leave gaps.
Declarative Resource Management
Related objectives: work with resource manifests; deploy applications from YAML resource manifests; update application deployments; deploy applications using Kustomize; work with Kustomize overlays.
- Write and edit manifests by hand until you can do it without copying from a reference
- Practice updating a running deployment declaratively, then confirm the change rolled out
- Build a base and at least two overlays, and verify that the rendered output differs the way you intended
Application Deployment
Related objectives: deploy applications; deploy applications from templates and Helm charts; manage application deployments; work with replica sets; work with labels and selectors; create and use secrets; create and use configuration maps.
- Deploy the same application three ways (manifest, template, Helm chart) and compare what each creates
- Break a selector on purpose and trace why a service or replica set stops matching pods
- Inject configuration through a config map and sensitive values through a secret, then verify both inside a running pod
Identity, Access, and Permissions Drills
Authentication and authorization is one of the most scenario-friendly areas to train, because you can set up, break, and repair it entirely on your own cluster. The objectives name specific tasks:
- Configure the HTPasswd identity provider for authentication
- Create and delete users; modify user passwords
- Create and manage groups
- Modify user and group permissions
A strong drill sequence: add an HTPasswd provider, create several users, place them in groups, grant different permissions at different scopes, then log in as each user and confirm what they can and cannot do. Then change a password and confirm the old one stops working. Finally, remove a user and check what remains behind. Many candidates can perform each step in isolation but stumble when the steps must be chained correctly under time pressure.
Related territory includes service accounts and security context constraints, covered below under application security.
Networking and Traffic Control Training
The networking cluster of objectives is broad, and it rewards candidates who have actually diagnosed a failing route rather than only creating a working one. The listed tasks include:
- Configure network security and networking components
- Troubleshoot software defined networking
- Create and edit external routes; control cluster network ingress
- Secure external and internal traffic using TLS certificates
- Configure application network policies
- Expose non-HTTP/SNI applications; configure a load balancer service; configure external application access
- Configure services; expose applications to external access
Suggested Networking Drills
Build original scenarios, not recollections of exam tasks.
- Deploy two applications in separate projects, then write a network policy that permits only the traffic you intend and test both the allowed and denied paths
- Create a route, then deliberately misconfigure its target service and practice reading status, events, and logs to find the cause
- Secure a route with a certificate you generate yourself, and verify the client-side behavior
- Expose a non-HTTP workload and confirm external reachability through a load balancer service
Because the exam checks working results, always end each drill with a connectivity test from the perspective of the actual client, not just a resource that reports "created."
Quotas, Operators, and Application Security
Three further clusters complete the objective list. They are easy to under-train because each feels like "just configuration," but each contains tasks with ordering and scope subtleties.
Developer Self-Service and Resource Governance
Objectives: enable developer self-service; configure cluster resource quotas; configure project quotas; configure project resource requirements; configure project limit ranges; configure project templates.
- Customize a project template, then create a new project and confirm the template's quotas and limits were applied
- Hit a quota deliberately and read the resulting error so you recognize it quickly
- Understand how limit ranges and resource requirements interact with pod scheduling
Operator Management
Objectives: manage OpenShift operators; install an operator; uninstall an operator; delete an operator.
- Install an operator, confirm it is healthy, then remove it cleanly
- Note that the objective list distinguishes uninstalling from deleting, so practice both and observe what each leaves behind
Application Security
Objectives: configure application security; configure and manage service accounts; run privileged applications; manage and apply permissions using security context constraints; create and apply secrets to manage sensitive information; configure application access to Kubernetes APIs.
- Create a workload that fails because of a security context constraint, then fix it with the narrowest change that works
- Grant a service account only the API access an application needs and verify the application can use it
The list closes with two workload types that are easy to forget: deploying jobs to perform one-time tasks and configuring Kubernetes cron jobs. Write a job that succeeds, one that fails, and a cron job with a schedule you can observe firing.
Sequencing Your Training Weeks
Generic scheduling advice matters less than ordering topics by dependency. Identity and projects underpin almost everything else, and networking troubleshooting only makes sense once you can deploy and expose applications. One sensible EX280-specific ordering:
Foundations and Observation
- Console and CLI parity, projects, resource queries and filtering, logs, events, alerts
- Images, tags, and digests
Declarative Deployment
- Manifests, updates, Kustomize overlays, templates, Helm
- Config maps, secrets, replica sets, labels and selectors
Access and Networking
- HTPasswd, users, groups, permissions
- Services, routes, TLS, network policies, load balancer services
Governance, Operators, Security, and Rehearsal
- Quotas, limit ranges, project templates, operators, service accounts, SCCs
- Jobs and cron jobs, then timed mixed-topic runs against the documentation only
Compress or stretch this to fit your experience. Seasoned OpenShift operators may need far less time on the first two weeks; newcomers to containers should consider adding time before Week 1. For a view on workload difficulty, see How Hard Is the EX280 Exam? Complete Difficulty Guide 2026.
Logistics That Shape How You Train
Several policy details affect your preparation and are worth confirming early:
- Fee: The program-wide standard exam list price is USD 500, but the regional booking-cart price controls what you actually pay. See EX280 Certification Cost 2026: Complete Pricing Breakdown for context.
- Delivery: Remote, testing-center, and classroom delivery are subject to booking availability. Remote candidates need LiveUSB, a successful compatibility test, and the required identity and hardware checks, so do not leave the compatibility test until the night before.
- Version: Multiple exam versions are in use. Red Hat publishes a document titled "Red Hat Certification Exam Objectives by Version," but it could not be retrieved for this article, so no version-specific objectives are inferred from it. Confirm your designated exam version in the booking or LMS before finalizing your plan.
- Retake: Eligible unsuccessful first individual attempts receive one free retake under Red Hat's training policies, subject to purchase or subscription eligibility periods and scheduling restrictions.
- Results: The exam page says results usually arrive within three U.S. business days, while the program guide allows five business days. Neither provides task-by-task performance detail.
- Validity: Certifications are current for three years. Renewal can happen through the original exam or qualifying same-level or higher-level credentials under the current framework. Older Red Hat renewal wording still circulates, so consult the current handbook, dated framework, and your active transcript rather than a single legacy page.
For scheduling windows and deadlines, see EX280 Exam Dates 2026: Testing Windows, Deadlines & Scheduling, and for scoring questions, EX280 Passing Score 2026: Exactly What You Need to Pass.
Key Takeaway
Treat the objective list as a checklist of verbs: configure, create, deploy, expose, troubleshoot. For each one, you should be able to perform the task from a blank state, verify it from the user's perspective, and confirm it survives the platform lifecycle, using only the supplied documentation.
Frequently Asked Questions
No. DO280 is a Red Hat preparation course for OpenShift 4.22, but course topics describe curriculum, not a weighted exam blueprint, and do not establish exhaustive exam coverage. Use the course as one input and the published exam objectives as your checklist.
Red Hat recommends RH124-level skills, DO180 and DO280 or equivalent work experience, and container familiarity, and strongly recommends RHCSA, but RHCSA is not required. Equivalent hands-on experience can substitute for formal courses, though you should honestly assess your gaps against the objective list.
It is a three-hour, hands-on assessment on OpenShift 4.22. Relevant product documentation is supplied, and no outside assistance is allowed. Configurations and services must remain functional across the normal platform lifecycle without manual restoration.
EX280 plus EX380 is the path to Red Hat Certified Engineer in OpenShift. That does not change what EX280 itself covers, so do not mix EX380 objectives into your EX280 training plan. See EX280 Certification for the broader credential picture.
No. Certification does not guarantee earnings or employment. For market context and the kinds of roles that list this credential, see EX280 Salary Guide 2026: Complete Earnings Analysis, EX280 Jobs, and Is the EX280 Certification Worth It? Complete ROI Analysis 2026.