100+ Free EX432 Practice Questions

Pass your Red Hat Certified Specialist in OpenShift Advanced Cluster Management (EX432) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

~50-60% Pass Rate

100+ Questions

100% Free

1 / 100

Question 1

Score: 0/0

Which custom resource is created on the hub cluster to install Red Hat Advanced Cluster Management for Kubernetes?

MultiClusterHub

AdvancedClusterManager

RHACMOperator

ManagedClusterHub

to track

2026 Statistics

Key Facts: EX432 Exam

210/300

Passing Score (70%)

Red Hat

~4 hours

Single Section

Red Hat

$400

Exam Fee (USD)

Red Hat

80-140 hrs

Study Time

Recommended

$140-200K

Platform Engineer Salary

Glassdoor 2024

3 years

Cert Valid

Red Hat renewal

EX432 is Red Hat's RHACM specialist exam — a roughly 4-hour, hands-on, performance-based test with no multiple-choice questions. Passing score is 210/300 (70%) and the exam fee is approximately $400 USD. EX432 replaced the retired EX480 and is now RHACM-focused (RHACS coverage was removed). The credential is valid for 3 years and counts toward Red Hat Certified Architect (RHCA). Holders typically work as senior platform/SRE/OpenShift engineers earning $140,000-200,000.

Sample EX432 Practice Questions

Try these sample questions to test your EX432 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which custom resource is created on the hub cluster to install Red Hat Advanced Cluster Management for Kubernetes?

A.MultiClusterHub

B.AdvancedClusterManager

C.RHACMOperator

D.ManagedClusterHub

Explanation: The MultiClusterHub custom resource (in the multicluster.openshift.io API group) is created in the open-cluster-management namespace after the operator is installed. Reconciling MultiClusterHub deploys the hub components: cluster-manager, application-manager, governance-policy-propagator, search, console plugin, and others.

2In which namespace must the MultiClusterHub CR be created when installing RHACM?

A.openshift-operators

B.open-cluster-management

C.kube-system

D.rhacm-system

Explanation: RHACM hub components are installed into the open-cluster-management namespace. The Advanced Cluster Management operator subscription typically targets this namespace and the MultiClusterHub CR must be created there so the operator's reconciler picks it up.

3What is the minimum supported OpenShift version on the hub cluster for current RHACM 2.x releases?

A.OpenShift 3.11

B.OpenShift 4.6

C.OpenShift 4.12 or later (per the support matrix)

D.OpenShift 4.18 only

Explanation: Red Hat publishes a support matrix per RHACM minor version. For current RHACM 2.x releases the hub cluster generally requires OpenShift 4.12 or later. Always check the version-specific support matrix before installing because the supported floor moves up with each release.

4Which command verifies that the MultiClusterHub installation has completed successfully?

A.oc get multiclusterhub -n open-cluster-management

B.oc describe operator rhacm

C.oc get rhacm-status

D.oc rollout status deploy/rhacm

Explanation: Running oc get multiclusterhub -n open-cluster-management shows the STATUS column. The installation is complete when the phase is Running and all components are reporting Available. oc describe multiclusterhub shows per-component status conditions for troubleshooting.

5Which RHACM component runs on every managed cluster and provides the connection back to the hub?

A.klusterlet

B.kubelet

C.cluster-manager

D.registration-controller

Explanation: The klusterlet (open-cluster-management agent) runs on each managed cluster in the open-cluster-management-agent namespace. It registers the cluster with the hub, applies ManifestWorks, reports cluster status, and runs add-on agents.

6Which namespace on a managed cluster hosts the klusterlet agent pods?

A.open-cluster-management

B.open-cluster-management-agent

C.kube-system

D.klusterlet-system

Explanation: The klusterlet operator is installed in open-cluster-management-agent and the klusterlet's add-on agents typically run in open-cluster-management-agent-addon. The hub namespace open-cluster-management is only on the hub cluster.

7When you import an existing OpenShift cluster into RHACM, which CR represents the cluster on the hub?

A.ManagedCluster

B.ImportedCluster

C.ClusterRegistration

D.RemoteCluster

Explanation: ManagedCluster is a cluster-scoped CR on the hub (cluster.open-cluster-management.io) representing each cluster joined to the fleet. The hub creates a same-named namespace where add-on configuration, manifest works, and per-cluster resources live.

8Which CR enables and configures add-ons (such as policy controller, search collector, observability) on a specific managed cluster?

A.KlusterletAddonConfig

B.ManagedClusterAddOnSet

C.AddonProfile

D.ClusterAddon

Explanation: KlusterletAddonConfig (agent.open-cluster-management.io) is created in the managed cluster's namespace on the hub and lists which add-ons (applicationManager, policyController, certPolicyController, iamPolicyController, searchCollector) should run on that managed cluster.

9Which Hive resource represents a ClusterDeployment-driven OpenShift cluster that RHACM provisions on a cloud provider?

A.ClusterDeployment

B.ClusterInstall

C.ProvisionedCluster

D.ManagedClusterTemplate

Explanation: ClusterDeployment (hive.openshift.io) is the top-level Hive CR representing a provisioned OpenShift cluster. It references an InstallConfig secret, provider credentials, pull secret, and SSH key, and Hive runs the openshift-install workflow to create the cluster.

10Which Hive CR defines the OpenShift release image used when provisioning a new cluster?

A.ClusterImageSet

B.ReleaseChannel

C.InstallConfig

D.OCPRelease

Explanation: ClusterImageSet (cluster-scoped, hive.openshift.io) holds the releaseImage URL (e.g., quay.io/openshift-release-dev/ocp-release:4.16.10-x86_64). ClusterDeployment and ClusterPool reference a ClusterImageSet by name to pick the OCP version installed.

About the EX432 Exam

Performance-based certification for engineers managing OpenShift fleets with Red Hat Advanced Cluster Management (RHACM). EX432 (which replaces the retired EX480) validates hands-on skills installing the MultiClusterHub on a hub cluster, importing and provisioning managed clusters with Hive and HyperShift, delivering applications via the Subscription model and Argo CD ApplicationSet, enforcing governance with Policy, PlacementBinding, and ConfigurationPolicy, configuring multi-cluster observability with Thanos and Grafana, and using Search and ManagedClusterSets for fleet RBAC and placement.

Assessment

Single performance-based hands-on section on a live RHACM hub plus managed clusters

Time Limit

~4 hours

Passing Score

210/300 (70%)

Exam Fee

$400 USD (Red Hat)

EX432 Exam Content Outline

10%

RHACM Installation and Architecture

MultiClusterHub CR, multicluster-engine, klusterlet on managed clusters, clusteradm CLI, hub-spoke registration

18%

Cluster Lifecycle Management

Import and detach (ManagedCluster, KlusterletAddonConfig), Hive ClusterDeployment, ClusterPool, ClusterClaim, ClusterImageSet, ClusterCurator, hibernation, upgrades, Assisted Installer (InfraEnv/Agent)

13%

Hosted Control Planes (HyperShift)

HostedCluster and NodePool CRs, hosting cluster setup, MCE-driven HyperShift add-on, KubeVirt and AWS provider modes

15%

Application Lifecycle

Application/Subscription model with Channels (Git, HelmRepo, ObjectBucket), Subscription overrides, HelmRelease, GitOpsCluster + ApplicationSet via OpenShift GitOps (Argo CD), clusterDecisionResource generator

20%

Governance, Risk, and Compliance

Policy CR with PlacementBinding, ConfigurationPolicy (musthave/mustnothave/mustonlyhave), IamPolicy, CertificatePolicy, OperatorPolicy, PolicyGenerator (kustomize), Gatekeeper integration, hub templating

10%

Cluster Sets and Placement

ManagedClusterSet, ManagedClusterSetBinding, RBAC verbs join/bind, Placement vs PlacementRule, PlacementDecision, claim-based selectors, tolerations

Observability

MultiClusterObservability CR, Thanos object-store config, metrics-collector remote-write, allowlist ConfigMap, Grafana dashboards, Alertmanager, observability=disabled label

search-collector, search-indexer, search-postgres backend, related filter, saved searches, console plugin

Discovery and Automation

DiscoveryConfig + DiscoveredCluster (OCM integration), Ansible Automation Platform integration via ClusterCurator hooks and AnsibleJob CR, cluster-backup operator with OADP

How to Pass the EX432 Exam

What You Need to Know

Passing score: 210/300 (70%)
Assessment: Single performance-based hands-on section on a live RHACM hub plus managed clusters
Time limit: ~4 hours
Exam fee: $400 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

EX432 Study Tips from Top Performers

1Build a real RHACM lab — a hub cluster (1-3 nodes) plus at least one managed cluster (SNO is fine) is enough; everything you certify on must be reproducible

2Install RHACM end-to-end from the operator: create the OperatorGroup, Subscription, then the MultiClusterHub CR, and watch the operator reconcile all components

3Practice both import paths: the auto-import token flow (clusteradm join + clusteradm accept) and the manual two-YAML import (crds.yaml then import.yaml)

4Drill Hive: ClusterImageSet, ClusterDeployment with credentialsSecretRef + pullSecretRef, ClusterPool with hibernate, then claim a cluster with ClusterClaim

5Stand up at least one HostedCluster (HyperShift) with a NodePool — the AWS or KubeVirt provider is the most documented

6Master the Subscription model: Channel (Git + HelmRepo), Subscription with packageOverrides, Application grouping, and PlacementRule selecting by label

7Connect OpenShift GitOps to RHACM: install the operator, create a GitOpsCluster, and verify ApplicationSet using the clusterDecisionResource generator fans out to placed clusters

8Memorize the governance triangle: Policy + PlacementBinding + Placement (or PlacementRule). Walk through one ConfigurationPolicy with each complianceType (musthave, mustnothave, mustonlyhave)

9Use PolicyGenerator (kustomize plugin) to build policies from plain manifests — saves enormous time vs writing Policy YAML by hand

10Practice hub templating: {{hub fromConfigMap ... hub}} and {{hub fromSecret ... hub}} so per-cluster values can come from hub-side data

11Drill ManagedClusterSet RBAC: managedclustersets/join (move clusters in) and managedclustersets/bind (allow ManagedClusterSetBinding) — the two virtual sub-resource verbs are easy to confuse

12Configure MultiClusterObservability with an S3-compatible bucket (MinIO or NooBaa is fine), confirm metrics-collector pods on the spoke, and customize the allowlist via observability-metrics-custom-allowlist

13Run timed mock labs the last two weeks — full installs, governance fan-out, an Argo CD ApplicationSet rollout, and an upgrade via ClusterCurator

Frequently Asked Questions

What replaced EX480, and how is EX432 different?

EX432 replaces the retired EX480. The biggest change is scope: EX480 covered Red Hat Advanced Cluster Security (RHACS / StackRox) plus RHACM, while EX432 is RHACM-focused. Expect deeper coverage of MultiClusterHub install, ManagedCluster lifecycle (Hive, HyperShift), Subscription/ApplicationSet, governance Policy templates, and observability — no RHACS questions.

What is the EX432 pass rate?

Red Hat does not officially publish pass rates. Industry estimates put first-attempt pass rates around 50-60% because the exam is fully hands-on across a multi-cluster fleet and the breadth of RHACM CRDs is wide. The passing score is 210/300 (70%). Most candidates need 80-140 hours of hands-on practice on a real RHACM hub plus at least one managed cluster.

What OpenShift / RHACM versions does EX432 cover?

EX432 aligns to currently-supported RHACM 2.x releases on OpenShift 4.x. Always check the Red Hat exam page for the active objectives version before scheduling. Practice on the latest RHACM that matches the documented objectives, with at least one managed cluster (a small SNO or KubeVirt-hosted HCP works fine).

How is EX432 different from EX280 (OpenShift Administration)?

EX280 is single-cluster OpenShift administration: users, projects, builds, networking, storage on one cluster. EX432 is multi-cluster: fleet install of RHACM, hub-spoke registration, governance Policy fan-out, Subscription delivery to many clusters at once, multi-cluster observability with Thanos, ManagedClusterSet RBAC, and Hive/HyperShift cluster lifecycle. None of these are EX280 objectives.

What are the EX432 prerequisites?

There is no enforced prerequisite — anyone can register. Red Hat strongly recommends RHCSA + RHCE + EX280 (OpenShift Administration) and the RH343 Red Hat Advanced Cluster Management for Kubernetes course or equivalent experience. EX432 also counts toward the Red Hat Certified Architect (RHCA) credential.

Does EX432 expire?

Yes — EX432 is valid for 3 years from the date you pass. You can recertify by passing the current EX432 again, passing a higher-level Red Hat exam, or maintaining RHCA via additional credentials. Red Hat sends renewal notifications before expiration.

How long should I study for EX432?

Plan 80-140 hours of hands-on study over 8-12 weeks if you already have EX280-level OpenShift experience. Build a real RHACM hub plus at least one managed cluster, work through every objective until commands are muscle memory, and run timed mock labs covering install, governance, and an Argo CD ApplicationSet end-to-end.

What jobs can I get with EX432?

EX432 qualifies you for: Senior OpenShift Platform Engineer ($140-200K), Multi-Cluster SRE ($150-210K), GitOps / Platform Engineer ($150-220K), Cloud-Native Architect ($160-240K), and Edge / Telecom Platform Engineer ($150-210K). Demand is strongest in financial services, telecom, government, and large enterprises running federated OpenShift estates.