CKA logo
Focused certification exam prep
Start practice

What Is CKA?

TL;DR
  • CKA is a hands-on, performance-based exam: ~15-20 tasks solved at a Linux command line in 2 hours, passing score 66%.
  • The exam fee is $445 and includes one free retake plus two Killer.sh simulator attempts.
  • Troubleshooting is the largest domain at 30% - ignoring it is the most common preparation mistake.
  • The exam environment tracks the latest Kubernetes minor release; verify the Linux Foundation FAQ before scheduling.

What Is CKA?

The Certified Kubernetes Administrator (CKA) is the industry-standard credential that proves you can operate and manage production-grade Kubernetes clusters - not just describe concepts in a multiple-choice quiz, but actually fix things under time pressure at a real command line. It is widely regarded as the most credible Kubernetes credential available and is recognized by employers across cloud-native engineering, DevOps, and platform engineering roles worldwide.

Unlike many certifications that test theoretical recall, the CKA measures whether you can do the job. You are given a live, multi-cluster Kubernetes environment and a set of real administrative tasks. You type commands, apply YAML manifests, debug broken clusters, and configure networking - all within a two-hour window. There are no multiple-choice questions. The score reflects what you actually produced, not what you knew in the abstract.

If you want a broader orientation to the credential landscape, the CKA Certification overview covers where the CKA sits relative to other cloud-native credentials. This article focuses specifically on what the exam is, how it works, and what it demands from candidates.

Who Created the CKA and How Is It Delivered?

The CKA was created by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. Because Kubernetes itself is a CNCF project, the CKA carries the full weight of the upstream open-source community behind it - it is not a vendor-specific certification tied to one cloud provider's flavor of Kubernetes.

The exam is delivered entirely online through The Linux Foundation's certification platform using PSI Bridge / Secure Browser remote proctoring. There is no testing center option. You take the exam at your own computer, with a human proctor monitoring you through your webcam and screen share. This means your environment must meet PSI's technical requirements - a compatible operating system, a stable internet connection, and a cleared workspace - before you even open the first task.

Kubernetes Version Note: Version information from The Linux Foundation is currently conflicting. The product page lists Kubernetes v1.34, while the official FAQ lists v1.35 and states the environment aligns with the latest Kubernetes minor release within approximately 4-8 weeks of release. Always check the Linux Foundation FAQ for the current version before you schedule your exam - this directly affects which API fields and features are in scope.

CKA certifications earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the exam before the credential expires - there is no continuing education path or renewal module. This means staying current with Kubernetes is not optional if you want to maintain the credential.

Exam Format: What You Actually Do for Two Hours

The CKA exam consists of approximately 15-20 performance-based tasks presented in a Linux terminal environment. Each task is tied to a specific Kubernetes cluster context, which the task description will tell you to switch to using kubectl config use-context. Forgetting to switch context before working is one of the most common and painful mistakes candidates make.

Tasks vary considerably in complexity. Some are straightforward - create a deployment with a specific image and replica count, expose it with a Service. Others require multi-step reasoning: diagnose why a node is NotReady, locate the broken configuration, fix it, and verify the node rejoins the cluster. Partial credit is possible by task, which means a partially completed task still earns you something - but only if you leave your work in a valid state rather than half-implemented.

Exam Attribute CKA Specifics
Format Performance-based tasks (no multiple choice)
Number of Tasks ~15-20
Time Allowed 2 hours
Passing Score 66%
Partial Credit Yes, per task
Delivery Online, PSI Bridge remote proctoring
Kubernetes Version Latest minor release (verify FAQ before scheduling)
Validity 2 years (credentials earned after April 1, 2024)

The passing score of 66% is lower than many candidates expect. This reflects the difficulty of producing correct output under time pressure in a live environment. It also means you do not need to solve every task perfectly - but you do need consistent competency across the five content domains. To understand how candidates experience this difficulty in practice, see How Hard Is the CKA Exam? Complete Difficulty Guide 2026.

The Five Domains That Define the CKA

The CKA exam blueprint is organized into five domains. Understanding their relative weights is critical for allocating your preparation time - and the weights are far from equal. For a deep breakdown of every competency within each domain, see the CKA Exam Domains 2026: Complete Guide to All 5 Content Areas.

Domain 1: Cluster Architecture, Installation & Configuration (25%)

The second-largest domain covers what Kubernetes actually is under the hood and how to build and maintain a working cluster from scratch.

  • Understanding control plane components (API server, etcd, scheduler, controller manager) and their roles
  • Installing clusters using kubeadm, including bootstrapping, joining nodes, and upgrading
  • Managing RBAC: ClusterRoles, Roles, ClusterRoleBindings, RoleBindings, ServiceAccounts
  • Working with kubeconfig files and managing cluster access for multiple contexts
  • etcd backup and restore - a high-probability exam task

Domain 2: Workloads & Scheduling (15%)

This domain tests your ability to deploy and manage application workloads and control where they land on the cluster.

  • Deployments, ReplicaSets, DaemonSets, StatefulSets, Jobs, and CronJobs
  • ConfigMaps and Secrets - creation, mounting as volumes, injecting as environment variables
  • Resource requests and limits, LimitRanges, ResourceQuotas
  • Node selectors, node affinity, taints, tolerations, and pod topology spread
  • Static pods and the role of the kubelet manifest directory

Domain 3: Services & Networking (20%)

A substantial domain covering how traffic moves within and into a Kubernetes cluster.

  • Service types: ClusterIP, NodePort, LoadBalancer, ExternalName
  • Ingress resources and Ingress controllers
  • Gateway API - the CKA now includes a dedicated documentation allowlist for this topic
  • Network policies for controlling pod-to-pod traffic
  • DNS within the cluster: how CoreDNS resolves service names and pod addresses

Domain 4: Storage (10%)

The smallest domain by weight, but tasks here are unforgiving because misconfigurations either work or they don't.

  • PersistentVolumes (PVs) and PersistentVolumeClaims (PVCs): creation and binding
  • StorageClasses and dynamic provisioning
  • Access modes (ReadWriteOnce, ReadOnlyMany, ReadWriteMany) and their implications
  • Mounting storage correctly into pods and verifying data persistence

Domain 5: Troubleshooting (30%)

The largest domain by a wide margin. Many candidates under-prepare here because troubleshooting feels harder to study than declarative configuration - but that is exactly why it carries the most weight.

  • Diagnosing why pods are Pending, CrashLoopBackOff, OOMKilled, or Evicted
  • Investigating node failures: kubelet status, system logs, node conditions
  • Debugging networking issues: DNS resolution failures, Service endpoint mismatches, NetworkPolicy blocks
  • Reading and interpreting kubectl describe, kubectl logs, and journalctl output
  • Cluster-component failures - broken API server manifest, misconfigured etcd flags

The single most important planning decision you can make is to take Domain 5 seriously from the start. Thirty percent of your score depends on your ability to walk into a broken cluster and systematically identify and fix what is wrong. Visit the individual domain guides for deeper coverage: Domain 1, Domain 2, Domain 3, and Domain 4.

The Open-Resource Rules You Must Understand

The CKA is an open-resource exam, but this phrase is widely misunderstood. You are not allowed to search the open internet. You are not allowed to open your own notes or external tabs. The only resources you may access are those available inside the exam VM through approved browser tabs.

Approved resources include:

  • Kubernetes official documentation (kubernetes.io/docs)
  • Kubernetes Blog (kubernetes.io/blog)
  • Helm documentation (helm.sh/docs)
  • CKA Gateway API documentation (as specified in exam task instructions)
  • Terminal instructions and task-specific documentation provided within the exam interface
  • /usr/share documents and packages available on the exam VM
What "Open Resource" Actually Means in Practice: Knowing that the Kubernetes documentation is available is not the same as being able to use it efficiently under time pressure. Candidates who have not practiced navigating to the right page within 30 seconds lose significant time. Your preparation should include intentional practice locating specific YAML examples - PersistentVolume specs, NetworkPolicy templates, kubeadm upgrade procedures - so you can find and adapt them quickly on exam day.

Registration, Cost, and Scheduling Mechanics

The exam-only fee is $445. This includes:

  • One free retake (two total exam attempts)
  • 12 months from purchase to schedule and complete both attempts
  • Two Killer.sh simulator attempts - these replicate the exam interface more faithfully than almost any other practice resource

The free retake is contingent on not purchasing through an excluded single-exam SKU - verify at time of purchase that your bundle includes the retake. There are no formal prerequisites to register. The Linux Foundation does not require proof of prior experience, a training course, or a lower-level certification. However, the official guidance strongly recommends hands-on experience with Kubernetes, Linux system administration, YAML, and container fundamentals before sitting the exam.

For a full breakdown of pricing options, discounts, and what each bundle actually includes, see the CKA Certification Cost 2026: Complete Pricing Breakdown.

Key Takeaway

The Killer.sh simulator sessions included with your registration are among your most valuable preparation assets. They are harder than the real exam by design. Use both sessions strategically - not immediately after registering, but after you have covered all five domains - so the difficulty exposes real gaps rather than overwhelming you before you have built a foundation.

Who Should Earn the CKA?

The CKA is designed for people who administer Kubernetes clusters as part of their job or intend to. The CNCF describes the target candidate as a Kubernetes administrator responsible for cluster installation, configuration, management, and troubleshooting in a production environment. In practice, this credential is earned by:

  • DevOps and platform engineers who manage cluster infrastructure for engineering teams
  • Site reliability engineers (SREs) who are on call for cluster availability and incident response
  • Cloud infrastructure engineers at organizations running workloads on self-managed or managed Kubernetes (EKS, GKE, AKS)
  • Systems administrators transitioning into cloud-native infrastructure roles
  • Software engineers moving toward platform or infrastructure specializations

Employers who list CKA as a requirement or preferred qualification include cloud service providers, financial services firms, large technology companies, and consulting organizations that deliver Kubernetes infrastructure to clients. To understand the career and salary implications, CKA Salary Guide 2026: Complete Earnings Analysis covers what certified administrators earn across different roles and markets. For a broader view of career opportunities, see CKA Jobs.

Preparing Effectively for a Performance-Based Exam

Preparing for the CKA is fundamentally different from preparing for a multiple-choice certification. Reading and watching videos is not enough - you must spend the majority of your preparation time with your hands on a live cluster. The exam is graded on output, not intent.

Build a Lab Environment First

Before you study a single topic, set up an environment where you can practice. Options include a local cluster with kubeadm on VMs, a managed cloud cluster, or tools like kind (Kubernetes in Docker) or k3s. The specific tool matters less than having somewhere you can create, break, and fix real Kubernetes objects daily.

Sequence Your Domain Study Around Exam Weight

Given the five domains and their weights, a rational preparation sequence looks like this:

Weeks 1-2

Cluster Architecture (Domain 1, 25%)

  • Install a cluster with kubeadm end-to-end; do it multiple times until it is muscle memory
  • Practice etcd snapshot backup and restore - this task appears frequently
  • Build RBAC configurations: Roles, ClusterRoles, bindings, ServiceAccounts
Weeks 3-4

Services & Networking + Workloads (Domains 3 & 2, 35% combined)

  • Create and debug NetworkPolicies; verify traffic blocking with kubectl exec
  • Deploy Ingress resources and understand how the controller selects backends
  • Practice all workload types: Deployments, StatefulSets, DaemonSets, Jobs, CronJobs
Week 5

Storage + Troubleshooting Foundation (Domains 4 & 5)

  • Create PVs and PVCs with specific access modes and verify binding
  • Begin deliberate troubleshooting: intentionally break cluster components and fix them
Weeks 6-7

Troubleshooting Deep Dive (Domain 5, 30%)

  • Practice diagnosing every common pod failure state from first principles
  • Simulate node failures: stop kubelet, corrupt a static pod manifest, break the API server
  • Use Killer.sh simulator session 1 to benchmark where you stand
Week 8

Full Simulation & Documentation Navigation

  • Use Killer.sh simulator session 2 under real exam conditions (timed, no breaks)
  • Practice navigating the Kubernetes docs to specific pages in under 30 seconds
  • Review any domain where your simulator score indicates weakness

For a more detailed week-by-week plan with specific tasks mapped to exam topics, see the CKA Study Guide 2026: How to Pass on Your First Attempt. You can also reinforce your command-line speed and task familiarity using the CKA Exam Prep practice tests, which present questions in a format calibrated to the real exam's task style.

The Troubleshooting Trap: Many candidates allocate preparation time proportional to how comfortable a domain feels - and most find troubleshooting uncomfortable, so they study it last and briefly. This is backwards. Domain 5 carries 30% of the exam score. A candidate who can configure networking flawlessly but cannot diagnose a broken kubelet will almost certainly fail. Build deliberate cluster-breaking practice into every week of your preparation, not just the final stretch.

Whether the CKA is the right investment for your career stage is a legitimate question worth examining carefully. The Is the CKA Certification Worth It? Complete ROI Analysis 2026 article looks at the credential from a return-on-investment perspective - who benefits most, and where it makes less sense to prioritize it.

Frequently Asked Questions

What does CKA stand for?

CKA stands for Certified Kubernetes Administrator. It is a performance-based certification created by the Cloud Native Computing Foundation (CNCF) and The Linux Foundation that validates hands-on Kubernetes cluster administration skills. For more on the naming, see CKA Meaning and What Does CKA Stand For?

How many questions are on the CKA exam?

The CKA contains approximately 15-20 performance-based tasks. These are not questions in a traditional sense - each task requires you to produce a specific outcome in a live Kubernetes cluster environment within the two-hour exam window.

What Kubernetes version does the CKA exam use?

The Linux Foundation aligns the CKA environment with the latest Kubernetes minor release, typically within 4-8 weeks of that release. The FAQ currently lists v1.35, while the product page lists v1.34. Always check the official Linux Foundation FAQ immediately before scheduling to confirm the current version in use.

Can I use the Kubernetes documentation during the CKA exam?

Yes, but only the approved resources accessed inside the exam VM. This includes the official Kubernetes documentation, Kubernetes Blog, Helm documentation, and Gateway API documentation specified in the exam. External search engines and your own notes are not permitted. Speed of navigation matters - practice locating key pages quickly.

How long is a CKA certification valid?

CKA certifications earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the CKA exam before the credential expires. There is no continuing education alternative to renewal - you must pass the exam again. Planning for renewal means staying current with Kubernetes throughout your certification period.

Ready to pass your CKA exam?

Put this into practice with free CKA questions across every exam domain.