Practice for the Red Hat Certified Specialist in OpenShift AI (EX267) exam with 18 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: For deploying single, large foundation models (LLMs) requiring advanced features like autoscaling to zero, which serving. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Red Hat Certified Specialist in OpenShift AI (EX267) practice test →
What you will practice
- For deploying single, large foundation models (LLMs) requiring advanced features like autoscaling to zero, wh…
- What container technology does KServe rely on within OpenShift to provide scale-to-zero and serverless capabi…
- Which sub-component manages the specific allocation of notebook pods within the OpenShift cluster architectur…
- What occurs if a pipeline step execution exceeds the maximum allocated execution timeout duration setting?
- What custom resource layout enables administrators to define specific groups of users granted access to Jupyt…
- Which service mesh technology is utilized by OpenShift AI to secure and manage traffic between model endpoint…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. For deploying single, large foundation models (LLMs) requiring advanced features like autoscaling to zero, which serving stack is used?
Answer: A. KServe Serving Stack Platform
KServe is the designated serving stack for deploying large foundation models that require advanced features like scale-to-zero functionality. Conversely, ModelMesh is intended for managing multiple smaller models concurrently within a shared infrastructure.
Q2. What container technology does KServe rely on within OpenShift to provide scale-to-zero and serverless capabilities?
Answer: A. OpenShift Serverless (Knative)
KServe relies on OpenShift Serverless, powered by Knative, to provide scale-to-zero capabilities. Service Mesh handles internal routing, but Knative directly manages the lifecycle and traffic-driven scaling decisions for serverless inference.
Q3. Which sub-component manages the specific allocation of notebook pods within the OpenShift cluster architecture?
Answer: A. Notebook Controller deployment manager service instance
The Notebook Controller specifically handles the allocation and lifecycle of Jupyter notebook pods within OpenShift AI. While ModelMesh handles model serving, it does not manage the creation of user workbenches, making it the primary distractor.
Q4. What occurs if a pipeline step execution exceeds the maximum allocated execution timeout duration setting?
Answer: C. Task is forcefully terminated by controller
When a pipeline step exceeds its configured timeout duration, the execution engine forcefully terminates the task. Pipeline steps do not automatically retry upon timeout, they simply fail and halt the workflow progression.
Q5. What custom resource layout enables administrators to define specific groups of users granted access to Jupyter workbenches?
Answer: A. OdhDashboardConfig user group properties
Administrators use the OdhDashboardConfig custom resource to define specific user groups allowed to access Jupyter workbenches. Standard OpenShift OAuth manages general cluster authentication but does not restrict dashboard visibility specifically.
Q6. Which service mesh technology is utilized by OpenShift AI to secure and manage traffic between model endpoints?
Answer: C. Red Hat OpenShift Service Mesh based on Istio
OpenShift AI relies on Red Hat OpenShift Service Mesh, which is based on Istio, to secure and manage traffic for model endpoints. Other meshes like Linkerd or Consul are not integrated into the OpenShift AI architecture natively.
Q7. Which role allows a user to view project assets like workbenches and pipelines without permission to modify them?
Answer: B. view project permission role
The view role allows a user to see project assets like workbenches and pipelines without granting modification permissions. The edit role allows changes, while cluster-admin provides overarching administrative access beyond a single project.
Q8. Which service component handles routing external user traffic into an InferenceService model serving endpoint securely?
Answer: D. OpenShift Ingress or Service Mesh Ingress Gateway
External traffic to a serverless InferenceService is routed securely through the OpenShift Ingress or Service Mesh Ingress Gateway. Internal ClusterIP addresses are not accessible externally, making them unsuitable for this task.
Q9. When configuring a Ray cluster for distributed training, what role does the Head Node play?
Answer: D. It manages cluster orchestration, scheduling, and distribution of tasks to Worker Nodes
In a Ray cluster, the Head Node acts as the central brain, managing cluster orchestration, scheduling, and the distribution of tasks to Worker Nodes. It does not execute the heavy compute training loops independently.
Q10. Which resource type allows an administrator to define specific GPU allocation steps for different user teams?
Answer: B. Accelerator Profiles custom resource configuration definition
Accelerator Profiles are used to define available GPUs and their specific allocation or tolerations for data science projects. Resource Quotas are a generic OpenShift feature but do not map specific hardware accelerators to user teams.
Q11. Which component organizes workbenches, data connections, model servers, and pipelines into an isolated group?
Answer: B. Data Science Project resource domain
A Data Science Project acts as a specialized Kubernetes namespace that logically groups resources like workbenches, pipelines, and model servers. ModelMesh is strictly a runtime for model serving, not a grouping mechanism for all project resources.
Q12. What infrastructure layer is mandatory for managing traffic, mutual TLS, and routing for KServe in OpenShift AI?
Answer: C. OpenShift Service Mesh (Red Hat OpenShift Service Mesh / Istio)
KServe requires OpenShift Service Mesh, built on Istio, to properly handle inference traffic routing and mutual TLS. Standard OpenShift routers or HAProxy do not provide the advanced mesh capabilities required by the KServe architecture.
Q13. Which configuration object provides the model files location to a serving runtime deployed in an OpenShift AI project?
Answer: B. Data Connection definition schema
A Data Connection securely stores the credentials and endpoint URL needed to access model files from an S3-compatible object storage bucket. Pipeline definitions lack the specific object storage secrets needed to pull runtime model artifacts.
Q14. What mechanism allows an inference service to authenticate clients before allowing access to a prediction endpoint?
Answer: A. Token-based authorization via ServiceAccount tokens
KServe inference services rely on Kubernetes ServiceAccount tokens to verify and authenticate client requests to prediction endpoints. Basic authentication or standard NetworkPolicies alone do not provide the expected token-based authorization mechanism.
Q15. What tool or language is primarily used by data scientists to programmatically compile and build pipeline definitions?
Answer: B. Kubeflow Pipelines SDK library
Data scientists use the Kubeflow Pipelines SDK in Python to programmatically compile components and define pipelines. Jenkinsfiles and YAML manifests are infrastructure tools, whereas the SDK specifically constructs the directed acyclic graph.
Q16. What parameter in the InferenceService configuration specifies whether the model is deployed to KServe or ModelMesh?
Answer: D. annotations specifying the deployment mode (e.g., serving.kserve.io/deploymentMode)
Annotations such as serving.kserve.io/deploymentMode dictate whether the model is deployed via KServe or ModelMesh. Standard configuration parameters like image names or volume sizes do not control the underlying serving runtime selection.
Q17. What resource defines the runtime properties (like container image and environment variables) of a serving engine in OpenShift AI?
Answer: D. ServingRuntime CR
The ServingRuntime Custom Resource specifies the container image, environment variables, and serving behavior. This allows administrators to define distinct runtimes for different frameworks instead of modifying the Workbench CR.
Q18. How can an administrator monitor the individual container log outputs of a failing model deployment?
Answer: D. View pod logs in the OpenShift console or via oc logs
Administrators monitor failing model deployments by viewing pod logs via the OpenShift console or oc logs. Serving runtimes run in pods, so checking container logs is the fastest way to find runtime errors.
More Red Hat Certified Specialist in OpenShift AI (EX267) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.