Red Hat Certified Specialist in OpenShift Networking (EX282): Objectives and How to Prepare
Learn everything about the Red Hat Certified Specialist in OpenShift Networking EX282 in 2026, including exam objectives, prerequisites, topics, preparation, and tips.
Quick answer: EX282, the Red Hat Certified Specialist in OpenShift Networking exam, is a four-hour, performance-based exam testing configuration and troubleshooting of core networking, secondary and user-defined networks, DNS, ingress, egress, native BGP routing, node networking with NMState, and network observability on a live cluster. It counts toward RHCA. Confirm the current OpenShift version and objectives on Red Hat's exam page before you book.
Key takeaways
- EX282 is hands-on. You configure and fix real networking problems on a live cluster, not answer questions about them.
- The recommended prerequisite is DO282 (Configuring and Managing Red Hat OpenShift Networking) or equivalent experience; it is a recommendation, not a hard gate.
- Study by capability, not by command: understand the architecture, configure it, verify it, break it, then fix it, for each objective area.
- The specific OpenShift version this exam is based on changes over time. Confirm the current one on Red Hat's official page before scheduling.
What is the Red Hat Certified Specialist in OpenShift Networking (EX282)?
EX282 validates your ability to work with networking components in a Red Hat OpenShift Container Platform environment through practical administration and implementation, not theoretical recall. Candidates perform tasks involving core OpenShift networking, secondary networks, user-defined networks, DNS, ingress, egress, BGP routing, node networking and network observability. Passing earns the Red Hat Certified Specialist in OpenShift Networking credential and can also contribute toward the Red Hat Certified Architect (RHCA) path.
Who should take EX282?
- Cluster network engineers designing, implementing and maintaining OpenShift networking infrastructure.
- OpenShift platform administrators managing network isolation, ingress, egress and multi-tenant environments.
- Site reliability engineers who troubleshoot connectivity problems and implement network observability.
- Infrastructure architects working with advanced networking, secondary networks, BGP and node configuration.
- DevOps engineers who expose applications using routes, load balancers and ingress controller configurations.
Because EX282 is performance-based, practical experience with OpenShift command-line tools and real networking problems matters more than memorised definitions.
Prerequisites and exam format
Red Hat recommends Configuring and Managing Red Hat OpenShift Networking (DO282) or equivalent practical experience. Treat it as a skills recommendation, not a substitute for hands-on practice: solid production or lab experience can bridge the gap, and limited experience is better closed with structured training and labs first.
The exam is a single four-hour, performance-based section. Candidates configure and implement networking components and demonstrate that their work meets the stated objectives, which is a different kind of preparation from a multiple-choice exam. Internet access is not provided during the exam, and candidates cannot bring their own documentation; product documentation shipped with the product may be available in the exam environment. Confirm these rules on Red Hat's current exam page, since policies can change.
EX282 objective areas
| Area | Key skills to understand |
|---|---|
| Core networking | Cluster Network Operator, network plugin settings, CIDRs, MTU, host prefix, Multus and secondary networks |
| User-defined networks | UDN, ClusterUserDefinedNetwork, workload isolation and NetworkPolicy |
| DNS | DNS forwarding, CoreDNS health, service discovery and troubleshooting |
| Ingress | MetalLB, LoadBalancer services, TLS routes and ingress controller sharding |
| Egress | EgressFirewall, EgressIP, outbound rules and node assignment |
| BGP | FRRConfiguration, BGP neighbors, ASNs, route exchange and advertisements |
| Node networking | NMState, bonds, VLANs, Linux bridges and node selectors |
| Network observability | FlowCollector, eBPF flow collection, filtering and traffic analysis |
Core OpenShift networking and Multus
Know how to inspect the Cluster Network Operator configuration and identify CIDRs, MTU, host prefix and the active network plugin. Get comfortable with Multus CNI and NetworkAttachmentDefinition resources, and practise secondary network configurations including macvlan, ipvlan and bridge CNI plugins, along with static, host-local and DHCP address management.
User-defined networks and isolation
Practise creating namespace-scoped UserDefinedNetwork resources and cluster-wide ClusterUserDefinedNetwork resources, deploying workloads on them, checking connectivity, and verifying isolation from the default cluster network with NetworkPolicy. Practise troubleshooting failed connectivity and isolation as well as successful configuration.
DNS
Understand how OpenShift DNS supports internal service discovery, how to configure DNS forwarding for custom domains, and how to verify CoreDNS pod health. Practise resolving Kubernetes service names from inside a pod using the full form, such as service.namespace.svc.cluster.local, and isolate problems by layer: application, pod, service, DNS, or external network.
Ingress, routes and TLS
Understand how applications are exposed through OpenShift routes and LoadBalancer services, and the difference between edge, re-encryption and passthrough TLS termination. Practise MetalLB LoadBalancer services with IP address pools and ingress controller sharding using route selectors and labels until you can implement and verify them without step-by-step instructions.
Egress
Learn to create EgressFirewall resources with allow or deny rules using CIDR ranges and DNS names, and to configure EgressIP resources that assign static source IPs to namespaces. Practise choosing appropriate nodes for EgressIP assignment and understand how node labels support failover.
BGP
Practise configuring native BGP routing using FRRConfiguration resources: BGP peers, autonomous system numbers, router IDs and neighbor relationships. Verify whether sessions establish and whether expected routes, including service and pod network prefixes, are advertised to external peers.
Node networking with NMState
Practise the Kubernetes NMState operator and NodeNetworkConfigurationPolicy resources: node interfaces, bonded interfaces, VLAN sub-interfaces and Linux bridges, and how node selectors determine where a configuration applies. For virtualised environments, learn how NMState-managed bridges connect virtual machines to external provider networks through NetworkAttachmentDefinitions.
Network observability
Practise configuring FlowCollector resources and understand eBPF-based flow collection, including sampling, cache size, enabled features and resource limits. Practise filtering and analysing flows by namespace, pod, service or IP address so the collected telemetry actually helps you troubleshoot.
What operators are available during the exam?
Red Hat states that candidates receive a cluster with several operators and their dependencies preinstalled, which has included components such as OpenShift Virtualization, OpenShift Data Foundation, Kubernetes NMState, Loki, MetalLB and Network Observability. Understanding how these interact with OpenShift networking is useful preparation, but always verify the current official list before your exam, since Red Hat can change it.
How to prepare for EX282
- Learn OpenShift networking fundamentals first: pods, services, routes, network policies, DNS, ingress, egress and CNI concepts.
- Follow DO282 or equivalent training if your hands-on networking experience is limited.
- Build a hands-on lab and spend real time creating, modifying and intentionally breaking configurations, then fixing them.
- Practise without copying instructions once you have done a guided lab, to build operational fluency rather than memorised steps.
- Practise troubleshooting realistic failures across DNS, network policies, routes, secondary interfaces, egress, BGP and node networking.
- Use the official objectives as your final checklist and treat anything you cannot confidently perform as a study gap.
Common preparation mistakes
- Relying only on theory. Reading cannot replace hands-on configuration for a performance-based exam.
- Memorising commands without understanding resources. Know what each resource does and how to verify it worked, in addition to the syntax.
- Ignoring troubleshooting. A working configuration is only half the skill; practise diagnosing broken routes, DNS, egress and BGP sessions too.
- Studying an outdated objectives list. OpenShift and the exam evolve. Check Red Hat's current page shortly before your exam.
Is EX282 difficult?
Difficulty depends heavily on your practical OpenShift networking experience. Professionals who regularly configure networking and troubleshoot Kubernetes connectivity in production have a stronger base than candidates who have only studied the concepts. The four-hour, multi-task format means speed and troubleshooting discipline matter as much as knowledge, so combine technical study with repeated timed practice.
Next steps
For related OpenShift administration exam practice, see OpenShift EX280 exam practice questions. If you are mapping out the full architect path, read how to become a Red Hat Certified Architect. For structured networking training, see WebAsha's OpenShift administration course.
Related reading
Frequently Asked Questions
What's Your Reaction?
Like
0
Dislike
0
Love
0
Funny
0
Wow
0
Sad
0
Angry
0