Online Access Free EX432 Exam Questions

See the solution below in Explanation.
Explanation:
* Confirm the cluster is present on the hub:
* oc get managedcluster
* Bind cluster-dev to development:
* clusteradm clusterset bind --clusterset development --cluster cluster-dev
* Verify membership (common checks):
* oc get managedclustersetbindings -A
* oc get managedclusterset development -o yaml
* oc get managedcluster cluster-dev -o yaml | grep -i clusterset -n
Why this matters:
* ClusterSet binding is what allows RBAC/users/apps/policies scoped to that ClusterSet to target the cluster.

See the solution below in Explanation.
* Create a ConfigurationPolicy using mustnothave complianceType (common policy pattern).
* Bind to placement.
* Confirm noncompliance if the namespace exists; enforce removes it if remediation is enforce.

See the solution below in Explanation.
Explanation:
* In the hub cluster Web Console, go to Infrastructure # Clusters (ACM console navigation).
* Click Import cluster .
* Provide a name (the UI may request details like distribution/credentials depending on flow).
* The wizard will provide a command to run on the managed cluster you want to import.
* Copy that import command.
* Log into the managed cluster (spoke) using oc and run the copied command.
* Back on the hub, wait until the cluster status becomes Ready / Managed .
Why these steps matter:
* Import registers the managed cluster, installs the klusterlet/agent components, and enables policy/app placement management.

See the solution below in Explanation.
Explanation:
* Identify the managed cluster:
oc get managedcluster
* If required in your environment, remove dependent placements/policies/apps targeting it (exam often expects you to check "why deletion stuck").
* Delete managed cluster:
oc delete managedcluster cluster-dev
* Watch finalizers and cleanup:
oc get managedcluster cluster-dev -o yaml | grep finalizers -n
Why this matters:
Proper lifecycle operations (import/manage/detach) is core EX432/EX480 scope.

See the solution below in Explanation.
Explanation:
* Open the RHACS (Central) console (typically via a route created by Central).
* Navigate to: Platform Configuration # System Policies .
* Click Create Policy .
* Set the policy criteria:
* Add a rule/condition such as Image OS = debian:10 (as required by the lab)
* Set enforcement to apply at Build & Deploy stages.
* Build prevents images from being admitted into pipeline/registries depending on integration.
* Deploy prevents or flags deployments that violate policy.
* Save the policy.
* (Optional validation) Trigger a test deployment/image that matches debian:10 to confirm alerts
/enforcement behavior.
Why this matters:
* Enforcing at build+deploy catches risky images earlier and prevents policy violations from reaching runtime.