CKA logo
Focused certification exam prep
Start practice

What Is CKA Certification?

TL;DR
  • CKA is a performance-based exam: ~15-20 hands-on tasks completed at the Linux command line in 2 hours.
  • The passing score is 66%, with partial credit available on individual tasks.
  • Troubleshooting is the largest domain at 30%-it deserves more study time than any other area.
  • The $445 exam fee includes one free retake and two Killer.sh simulator sessions.

What CKA Certification Actually Is

The Certified Kubernetes Administrator (CKA) is a practitioner-level credential that validates your ability to install, configure, manage, and troubleshoot Kubernetes clusters in real production-like conditions. Unlike multiple-choice exams that test recognition, the CKA tests whether you can actually do the work-every task is hands-on, executed directly in a live Kubernetes environment from the Linux command line.

That distinction matters. A CKA holder has demonstrated they can deploy workloads, configure networking, manage persistent storage, and diagnose broken clusters under time pressure. Employers recognize this, which is why the credential carries significant weight in cloud-native hiring decisions. For a deeper look at the credential's broader meaning and context, see our overview at CKA Certification.

Performance-Based, Not Multiple Choice: Every question in the CKA exam requires you to produce a real outcome in a live cluster-create a pod, fix a broken node, configure RBAC. There are no answer bubbles to fill in. If the cluster state doesn't match the expected result, you don't get credit.

Who Creates and Administers the CKA

The CKA was created by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. The CNCF is the neutral home of Kubernetes itself, meaning the organization that stewards the technology also defines what competence with that technology looks like. This alignment between certification body and upstream project makes the CKA unusually authoritative compared to vendor-specific credentials.

Delivery is handled through The Linux Foundation's certification platform using PSI Bridge/Secure Browser remote proctoring. You take the exam from your own machine, but a proctor monitors your session and your environment is locked down to an approved set of resources. There is no physical testing center requirement.

Kubernetes itself evolves rapidly, and the CKA environment tracks closely. The Linux Foundation FAQ currently lists the exam environment as Kubernetes v1.35, while the product page references v1.34-a reflection of how quickly the environment can shift. The Linux Foundation states it aligns the environment with the latest Kubernetes minor release within approximately 4-8 weeks of release. Always verify the current version in the official FAQ before you schedule.

Exam Format: What You Actually Face

Understanding the format is not a minor logistical detail-it fundamentally shapes how you should prepare. The CKA presents approximately 15-20 performance-based tasks that must be completed within a 2-hour window. Each task drops you into a specific Kubernetes cluster context and asks you to produce a working result.

Tasks vary in complexity. Some are straightforward: create a pod with a specific image and resource limits. Others are multi-step: set up a PersistentVolume, create a PersistentVolumeClaim bound to it, and mount it inside a deployment. A few are diagnostic: a node is NotReady or a pod is crash-looping-find and fix the root cause.

Exam Attribute Detail
Format Performance-based tasks in a live Kubernetes environment
Number of Tasks ~15-20
Duration 2 hours
Passing Score 66%
Scoring Partial credit possible per task
Delivery Remote proctored via PSI Bridge/Secure Browser
Kubernetes Version Aligns with latest minor release (verify FAQ before scheduling)
Prerequisites None official; hands-on Kubernetes/Linux/YAML experience strongly recommended

Partial credit is a meaningful feature of the scoring model. If a task has multiple components and you complete most of them correctly, you earn partial marks rather than losing the entire task's value. This makes strategic task management important: it is often better to complete 80% of every task than to perfect 60% of them and skip the rest entirely.

To understand how this format translates into difficulty for most candidates, see our detailed breakdown at How Hard Is the CKA Exam? Complete Difficulty Guide 2026.

The Five CKA Domains Explained

The CKA curriculum is divided into five weighted domains. These weights are not just administrative-they tell you where to spend your study hours. For comprehensive coverage of every domain, our CKA Exam Domains 2026: Complete Guide to All 5 Content Areas goes deep on each one.

Domain 1: Cluster Architecture, Installation & Configuration (25%)

The second-largest domain tests your ability to build and manage Kubernetes clusters from the ground up.

  • Bootstrap clusters using kubeadm, including control plane and worker node setup
  • Manage etcd: backups, restores, and understanding etcd's role in cluster state
  • Configure RBAC: roles, cluster roles, role bindings, and service accounts
  • Upgrade cluster components using kubeadm upgrade procedures
  • Manage kubeconfig files and cluster contexts

See the full breakdown: CKA Domain 1: Cluster Architecture, Installation & Configuration (25%) - Complete Study Guide 2026

Domain 2: Workloads & Scheduling (15%)

This domain covers how applications run and how Kubernetes decides where to place them.

  • Deployments, ReplicaSets, DaemonSets, StatefulSets, Jobs, and CronJobs
  • ConfigMaps and Secrets: creation, injection via environment variables and volumes
  • Resource requests and limits; understanding how they affect scheduling decisions
  • Node affinity, taints, tolerations, and pod topology spread constraints

See the full breakdown: CKA Domain 2: Workloads & Scheduling (15%) - Complete Study Guide 2026

Domain 3: Services & Networking (20%)

One of the harder domains for many candidates because networking concepts span multiple abstraction layers.

  • ClusterIP, NodePort, and LoadBalancer service types; Endpoints and EndpointSlices
  • Ingress resources and Ingress controllers
  • NetworkPolicies: restricting pod-to-pod and pod-to-external traffic
  • CoreDNS: how service discovery works and how to troubleshoot DNS failures
  • Gateway API resources (CKA-specific documentation is an approved exam resource)

See the full breakdown: CKA Domain 3: Services & Networking (20%) - Complete Study Guide 2026

Domain 4: Storage (10%)

The smallest domain, but storage tasks appear on the exam and skipping them sacrifices guaranteed points.

  • PersistentVolumes (PV) and PersistentVolumeClaims (PVC): creation and binding
  • StorageClasses and dynamic provisioning
  • Volume access modes: ReadWriteOnce, ReadOnlyMany, ReadWriteMany
  • Mounting volumes into pods and containers

See the full breakdown: CKA Domain 4: Storage (10%) - Complete Study Guide 2026

Domain 5: Troubleshooting (30%)

The largest domain and the one that most directly separates candidates who have real cluster experience from those who have only read about Kubernetes.

  • Diagnosing and fixing failing nodes: kubelet issues, certificate problems, networking misconfigurations
  • Debugging pod failures: CrashLoopBackOff, ImagePullBackOff, OOMKilled, pending pods
  • Application-level troubleshooting: service connectivity, DNS resolution failures, misconfigured probes
  • Logging: reading container logs, event streams, and control plane component logs
  • Cluster component failures: identifying which control plane component is broken and why
The 30% Rule: Troubleshooting carries more exam weight than any other domain-it's 5 percentage points larger than Cluster Architecture and double the weight of Workloads & Scheduling. If your preparation time is limited, prioritize getting fast and confident at diagnosing broken clusters. That single domain can determine whether you pass or fail.

Open-Book-But Not Wide Open

The CKA is an open-resource exam, but candidates often misunderstand what that means. You do not have access to the open internet or an external search engine. You have access to a curated list of approved resources inside the exam VM:

  • Kubernetes documentation (kubernetes.io/docs)
  • Kubernetes Blog (kubernetes.io/blog)
  • Helm documentation
  • Task-specific documentation as defined per task
  • CKA Gateway API documentation
  • Terminal instructions within the exam environment
  • /usr/share documents and installed packages on the exam nodes

This matters enormously for how you study. You need to know the Kubernetes documentation well enough to navigate it efficiently under time pressure-not to memorize every flag, but to know exactly where to look for a NetworkPolicy example or the kubeadm upgrade procedure. Candidates who have never practiced navigating the docs quickly will waste significant minutes searching during the exam.

Practice tests that simulate the real environment help you build that navigation fluency. Our CKA practice tests are designed to replicate the performance-based format so you arrive at test day with both technical skills and documentation speed already calibrated.

Registration, Fees, and Retake Policy

The current exam-only fee is $445. That purchase includes:

  • Two exam attempts (one free retake if you do not pass on the first try)
  • 12 months to schedule and use your exam attempts from the date of purchase
  • Two Killer.sh simulator sessions-a realistic exam simulator that is widely considered harder than the actual exam, making it excellent calibration practice

The free retake and the Killer.sh sessions are included unless you purchase through a specific excluded single-exam SKU-verify what is included at the point of purchase. For a complete breakdown of pricing options, bundles, and what to expect when buying, see our CKA Certification Cost 2026: Complete Pricing Breakdown.

There are no formal prerequisites to register. However, the Linux Foundation strongly recommends candidates have hands-on experience with Kubernetes, Linux command-line operations, YAML, and containers before attempting the exam. This is not a credential where theoretical knowledge alone is sufficient-the exam will surface gaps in practical skill immediately.

Certification Validity and Renewal

CKA credentials earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the exam before the credential expires-there is no continuing education pathway or shorter renewal assessment. This structure keeps the certification meaningful: a current CKA badge signals that the holder has recently demonstrated hands-on proficiency, not just passed an exam years ago.

The 2-year validity also reflects the pace of Kubernetes development. Kubernetes releases multiple minor versions per year, and the CKA environment tracks the latest minor release within roughly 4-8 weeks. A practitioner who earned their CKA three years ago and hasn't kept current may find that the tools and approaches they used have evolved significantly. The renewal requirement enforces currency.

Who Hires CKA-Certified Professionals

Demand for Kubernetes expertise spans virtually every sector of the technology industry. The CKA credential appears in job listings for roles including:

  • Kubernetes Administrator / Platform Engineer - building and maintaining cluster infrastructure for internal engineering teams
  • Site Reliability Engineer (SRE) - ensuring reliability and performance of Kubernetes-based services
  • DevOps / Cloud Infrastructure Engineer - managing CI/CD pipelines, deployments, and cluster operations
  • Cloud Solutions Architect - designing cloud-native architectures using managed Kubernetes services (EKS, GKE, AKS)
  • Consulting and Professional Services - helping enterprises adopt and operate Kubernetes at scale

Organizations hiring for these roles include cloud-native startups, large enterprises modernizing legacy infrastructure, financial services firms, healthcare technology companies, and the major cloud providers themselves. The CKA signals not just that you know Kubernetes, but that you can operate it under pressure-a distinction that matters in roles where cluster health directly affects production systems.

For detailed information about the job market and career paths this credential opens, see CKA Jobs and our CKA Salary Guide 2026: Complete Earnings Analysis for compensation context. If you're weighing whether the investment makes sense for your specific career stage, Is the CKA Certification Worth It? Complete ROI Analysis 2026 provides a structured way to think through that decision.

How to Structure Your Preparation

Because five domains of unequal weight must all be covered, preparation sequencing matters. A structured approach tied to domain weight and difficulty looks roughly like this:

Weeks 1-2

Foundation: Cluster Architecture (Domain 1, 25%)

  • Bootstrap a cluster with kubeadm from scratch-do it multiple times until it's automatic
  • Practice etcd backup and restore using etcdctl; understand what gets lost if etcd fails
  • Build RBAC configurations: Roles, ClusterRoles, bindings, and service accounts
  • Navigate the Kubernetes docs while working-practice finding kubeadm upgrade steps quickly
Weeks 3-4

Application Layer: Workloads & Networking (Domains 2 + 3, 35%)

  • Deploy every workload type: Deployments, StatefulSets, DaemonSets, Jobs, CronJobs
  • Build NetworkPolicies that restrict traffic between namespaces; test them
  • Configure Ingress resources and verify DNS resolution through CoreDNS
  • Practice scheduling techniques: node selectors, affinity rules, taints and tolerations
Week 5

Storage + Troubleshooting Foundations (Domains 4 + 5, 40%)

  • Create PVs and PVCs manually; verify binding and mount into a running pod
  • Begin break-and-fix exercises: intentionally break a cluster component and recover it
  • Practice reading kubelet logs, pod events, and control plane component logs with journalctl and kubectl
Weeks 6-7

Troubleshooting Depth + Full Simulations (Domain 5 focus)

  • Complete both Killer.sh simulator sessions; review every task you missed or partially completed
  • Run timed full-length practice sessions using CKA practice tests to build exam-pace fluency
  • Time yourself navigating Kubernetes docs to specific pages-if it takes more than 30 seconds, practice more
  • Focus additional hours on node-level troubleshooting: this is where many candidates lose the most points

For a fully developed study plan with resource recommendations, see our CKA Study Guide 2026: How to Pass on Your First Attempt.

Key Takeaway

The Troubleshooting domain (30%) is weighted more heavily than Cluster Architecture (25%) and more than double Workloads & Scheduling (15%). If your study time is constrained, allocate your final preparation weeks to break-and-fix exercises and node-level diagnostics-that's where the exam score is won or lost.

Frequently Asked Questions

What does CKA stand for?

CKA stands for Certified Kubernetes Administrator. It is a hands-on, performance-based certification issued by the Cloud Native Computing Foundation (CNCF) and The Linux Foundation that validates the ability to administer Kubernetes clusters in real-world conditions. For more context, see What Does CKA Stand For?

Is there a prerequisite to take the CKA exam?

There are no formal prerequisites to register for and sit the CKA exam. However, the Linux Foundation strongly recommends candidates have practical experience with Kubernetes, Linux command-line tools, YAML, and containers before attempting. The exam is entirely hands-on, so theoretical knowledge without lab practice is insufficient preparation.

What is the passing score for the CKA?

The passing score is 66%. Partial credit is available on individual tasks, meaning you do not need to complete every component of every task perfectly to earn points. Strategic time management-attempting all tasks and completing most of each-can meaningfully affect your final score.

How long is a CKA certification valid?

CKA credentials earned after April 1, 2024 are valid for 2 years from the date of passing. Renewal requires retaking and passing the exam before the credential expires. There is no shorter renewal assessment or continuing education alternative.

Can I use outside resources during the CKA exam?

The CKA is open-resource, but only to a specific approved list of resources accessible inside the exam VM-primarily the Kubernetes documentation, Kubernetes Blog, Helm documentation, Gateway API documentation, and materials installed on the exam nodes. External search engines and sites outside the approved list are not permitted. Knowing how to navigate the approved documentation quickly is itself a critical exam skill.

Ready to pass your CKA exam?

Put this into practice with free CKA questions across every exam domain.