Skip to main content
CNCF 🇺🇸 · 6 min read

How to Pass KCNA (Kubernetes and Cloud Native Associate) in 2026: Complete Study Guide

KCNA is the entry-level Kubernetes certification from CNCF — no hands-on tasks, just multiple choice. This guide covers all 4 domains, the best free resources, and a 4-week study plan to pass on your first attempt.

If you are moving into cloud-native development or DevOps and want to put Kubernetes knowledge on your resume, the KCNA (Kubernetes and Cloud Native Associate) is the most accessible starting point. Offered by the Linux Foundation and CNCF, it is a 90-minute multiple-choice exam with no hands-on tasks — just knowledge. This guide covers what is on the exam, how to study it efficiently, and how to pass on your first attempt.

What Is the KCNA Certification?

KCNA stands for Kubernetes and Cloud Native Associate. It is a pre-professional certification created by the Cloud Native Computing Foundation (CNCF) and administered through the Linux Foundation. It was designed to validate conceptual knowledge of Kubernetes and the broader cloud-native ecosystem — not operational skills.

KCNA is the right exam for:

  • Developers who work adjacent to Kubernetes and want to formalize what they know
  • DevOps beginners preparing for the hands-on CKA (Certified Kubernetes Administrator)
  • Operations staff learning how cloud-native infrastructure differs from traditional infrastructure
  • Students and bootcamp graduates adding a recognized credential to their profile
KCNA vs CKA: KCNA is multiple choice and tests conceptual understanding. CKA is a hands-on performance-based exam in a live terminal. Many candidates use KCNA as a structured study phase before attempting the CKA.

Exam Format and Facts

Detail Value
Exam Code KCNA
Format Multiple choice, online proctored
Duration 90 minutes
Passing Score 75%
Price $250 USD (includes one free retake)
Prerequisites None (recommended: basic Linux and networking knowledge)
Hands-on tasks No — knowledge-based multiple choice only
Validity 2 years
Issuing body CNCF / Linux Foundation

4 Exam Domains Explained

Domain Weight Key Topics
1. Kubernetes Fundamentals 46% Pods, Deployments, Services, ConfigMaps, Secrets, namespaces, control plane components, kubectl basics
2. Container Orchestration 22% Container runtimes (containerd, CRI-O), OCI specification, container networking (CNI), storage (CSI), scheduling
3. Cloud Native Application Delivery 16% CI/CD pipelines, GitOps principles, Helm charts, Argo CD, application packaging
4. Cloud Native Architecture 16% Microservices patterns, service meshes, observability (metrics, logs, traces), autoscaling, CNCF landscape

Domain 1: Kubernetes Fundamentals (46%)

This domain is the largest and the most important to get right. Expect questions about the Kubernetes control plane — specifically what the API server, etcd, scheduler, and controller manager each do. You must also understand workload objects: Pods, ReplicaSets, Deployments, StatefulSets, DaemonSets, and Jobs. Know how Services expose applications (ClusterIP, NodePort, LoadBalancer) and how Ingress routes external HTTP traffic. ConfigMaps and Secrets are common topics, as are namespaces and basic RBAC concepts.

Domain 2: Container Orchestration (22%)

This domain focuses on how containers actually run inside Kubernetes. Know the difference between the container runtime interface (CRI) and specific implementations (containerd, CRI-O). Understand the OCI (Open Container Initiative) image and runtime specifications. CNI (Container Network Interface) handles pod networking; CSI (Container Storage Interface) handles persistent volumes. The scheduler assigns pods to nodes using a filter-then-score process — know that phases are called filtering (predicates) and scoring (priorities).

Domain 3: Cloud Native Application Delivery (16%)

This domain tests GitOps and CI/CD concepts. The key distinction is that GitOps requires Git to be the single source of truth and uses pull-based deployment (the cluster pulls state from Git, not CI pushing to the cluster). Helm is the Kubernetes package manager — know the terms chart, release, and repository. Argo CD is the most common GitOps operator and frequently appears in exam questions.

Domain 4: Cloud Native Architecture (16%)

This domain covers observability and the CNCF project ecosystem. The three pillars of observability are metrics (Prometheus), logs (Fluentd/Loki), and traces (Jaeger/OpenTelemetry). Service meshes (Istio, Linkerd) handle mTLS and traffic management at the sidecar level. Know the CNCF project maturity tiers: Graduated, Incubating, and Sandbox. Common graduated projects that appear on the exam: Kubernetes, Prometheus, Envoy, Argo, Fluentd, Jaeger, Vitess, and CoreDNS.

4-Week Study Plan

This plan assumes 1–1.5 hours per day and no prior Kubernetes experience. Adjust the pace if you already work with containers.

Week Focus Goal
Week 1 Containers and Kubernetes basics — what Docker does, why Kubernetes exists, Pods, Nodes, control plane components Name every control plane component and its role from memory
Week 2 Workloads and networking — Deployments, StatefulSets, DaemonSets, Services (all types), Ingress, CNI, DNS Explain when to use each Service type and workload type
Week 3 Container Orchestration deep dive — CRI, OCI, CSI, scheduling, then GitOps (Helm, Argo CD, pull vs push CI/CD) Distinguish CNI / CSI / CRI clearly; explain GitOps vs CI/CD push model
Week 4 Cloud Native Architecture — Prometheus, Jaeger, OpenTelemetry, service meshes, CNCF landscape tiers, practice exams Score 80%+ on practice exams before booking the real exam

Best Free Study Resources

  • Kubernetes.io official documentation: The Concepts section covers almost every KCNA topic. Start with the Cluster Architecture and Workloads pages. Free at kubernetes.io/docs.
  • CNCF Landscape (landscape.cncf.io): Essential for Domain 4. Browse the graduated and incubating project lists — the exam tests whether you know which tier a given project belongs to.
  • KodeKloud free tier: The Kubernetes for Beginners course includes enough conceptual content to cover Domains 1 and 2. No credit card required for the free course.
  • Introduction to Kubernetes (LFS158) on edX: The Linux Foundation's own free introductory course. Directly aligned to KCNA content and maintained by the same organization that runs the exam.
  • CertLand KCNA Practice Exam: 340 practice questions covering all 4 domains with full explanations. Includes 10 free preview questions.
Study tip: Do not just read — draw diagrams. Sketching the Kubernetes control plane with arrows between components (kubelet → API server → etcd) locks the relationships in memory far better than re-reading bullet points.

Exam Day Tips

  • Time management: With 90 minutes for roughly 60 questions, you have about 90 seconds per question. Flag uncertain ones and return at the end — do not get stuck.
  • Read every option: KCNA distractors are carefully written. Two answers will look correct; the difference is usually a single word (e.g., "containerd" vs "Docker" as the CRI).
  • CNCF project questions: If a question asks which tool does X, eliminate any option that is not a real CNCF project or Kubernetes built-in feature. The exam does not include AWS-specific or Azure-specific tools.
  • GitOps questions: The word "declarative" and "Git as single source of truth" almost always point to the correct GitOps answer.
  • PSI Browser: The exam runs in the PSI Secure Browser. Test your system at least 24 hours before exam day using the PSI system check tool.

What to Do After KCNA

1
KCNA

Entry-level, knowledge-based. Validates conceptual Kubernetes and cloud-native understanding.

2
CKA (Certified Kubernetes Administrator)

Hands-on, $395. The most widely recognized Kubernetes credential for operations and platform roles.

3
CKAD (Certified Kubernetes Application Developer)

Hands-on, $395. Focused on deploying and managing applications — better fit for developer roles than CKA.

4
CKS (Certified Kubernetes Security Specialist)

Requires active CKA. Advanced security hardening for production clusters.

Ready to Practice?

Test your knowledge with our full 340-question KCNA practice exam — 10 questions free, no login required.

Practice KCNA Now →

Comments

Sign in to leave a comment.

No comments yet. Be the first!

Comments are reviewed before publication.