Cilium Certified Associate (CCA): exam, cost and domains
The Cilium Certified Associate (CCA) is a beginner-level Linux Foundation and CNCF certification in connecting, securing and observing Kubernetes clusters with Cilium. The exam is a 90-minute, online proctored, multiple-choice test that costs $250 including one free retake, has no prerequisites and is valid for 2 years. The Linux Foundation’s pass mark for its multiple-choice exams is 75%.
- Certification
- Cilium Certified Associate (CCA), from the Linux Foundation and CNCFLinux Foundation Education and CNCF, checked 14 October 2026
- Exam cost
- $250, including one free retakeCNCF CCA page, checked 14 October 2026
- Format
- Online, proctored, multiple-choiceLinux Foundation Education, checked 14 October 2026
- Duration
- 90 minutesLinux Foundation Education, checked 14 October 2026
- Number of questions
- Not published by the Linux Foundation or CNCFLinux Foundation Education and CNCF, checked 14 October 2026
- Passing score
- 75% — the Linux Foundation’s pass mark for its multiple-choice examsLinux Foundation FAQ for multiple-choice exams, checked 14 October 2026
- Prerequisites
- None; Kubernetes and basic networking knowledge recommendedLinux Foundation Education, checked 14 October 2026
- Exam eligibility
- 12 months to schedule and take the examLinux Foundation Education, checked 14 October 2026
- Validity
- 2 years; renew by passing the exam againLinux Foundation FAQ for multiple-choice exams, checked 14 October 2026
Know if you're ready for CCA — before you book.
Certsqill measures your CCA readiness across every official exam domain — one 0–100 score from coverage, accuracy and consistency that tells you whether to book, keep studying, or sit.
Why people switch to Certsqill
Everything you need to walk in ready
Know where you stand, understand every mistake, and study in your language — one payment, no subscription.
Your CCA Readiness Score, not a guess
One number from three signals — coverage, accuracy, and consistency — tells you whether to book the exam or keep studying.
Understand every CCA mistake
When you miss a question, it explains why — using your own answer history to catch the patterns you keep repeating. Included, no subscription.
Explanations in your language, questions stay exam-accurate
Get every explanation in your language while the questions stay in exam-accurate English. Technical terms stay in English — the way the exam writes them.
Everything you need to pass
Why you can trust these CCA questions
What is the Cilium Certified Associate?
The Cilium Certified Associate, or CCA, is an entry-level certification offered by the Linux Foundation together with the Cloud Native Computing Foundation (CNCF). According to CNCF, it confirms a user’s knowledge of connecting, securing and observing Kubernetes clusters using Cilium, and it is designed for platform or cloud engineers interested in networking, security and observability.
Cilium is the open source networking, security and observability layer for Kubernetes built on eBPF. It enforces identity-based network policy, offers an alternative to iptables-based networking, and includes Hubble for flow visibility. The CCA covers all of these, from the architecture and IP address management up to Cluster Mesh and BGP.
The Linux Foundation rates the CCA at beginner level. It is a multiple-choice exam, not a lab exam, so it tests understanding of how Cilium works rather than speed at the command line.
Source: CNCF — Cilium Certified Associate (CCA). Checked 14 October 2026.
How much does the Cilium Certified Associate exam cost?
The CCA exam costs $250. CNCF states that the price includes one free retake, and the Linux Foundation lists this as two exam attempts.
The Linux Foundation also sells the exam bundled with a THRIVE-ONE annual subscription to its e-learning catalogue for $495, advertised as a 40% saving.
After purchase you have 12 months to schedule and take the exam, and the retake has to be used within the same window.
Source: Linux Foundation Education — Cilium Certified Associate (CCA). Checked 14 October 2026.
CCA exam format
The CCA is an online, proctored, multiple-choice exam with a duration of 90 minutes. There is no test-center option listed; you take it remotely.
The Linux Foundation’s FAQ for its multiple-choice exams states that the online proctored exam runs on PSI’s proctoring platform, Bridge, using the PSI Secure Browser. Exams are scored automatically, and a score report is emailed within 24 hours of completion.
Neither the Linux Foundation nor CNCF publishes the number of questions on the CCA, so build your pacing during practice rather than relying on a per-question time budget from elsewhere.
Source: Linux Foundation — FAQ for multiple-choice exams. Checked 14 October 2026.
What is the CCA passing score?
The CCA page does not print a passing score itself. The Linux Foundation’s FAQ for multiple-choice exams, which covers the CCA format, states that a score of 75% or above must be earned to pass.
Three in four correct is a high bar for a beginner-level exam, and the domain spread is wide: eight domains, the largest worth only 20%. Gaps in smaller topics such as Cluster Mesh or BGP add up quickly.
Source: Linux Foundation — FAQ for multiple-choice exams. Checked 14 October 2026.
What is on the Cilium Certified Associate exam?
The Linux Foundation publishes eight domains with fixed weights, and CNCF has open-sourced the curriculum the exam is built on. Architecture and network policy together make up 38% of the exam, so understand how Cilium’s components, IPAM and datapath fit together and how identity-based policy is enforced before you move on.
- Architecture — 20%: Cilium’s role in Kubernetes, component roles, IPAM, datapath models
- Network Policy — 18%: policy intent, identity-based security, enforcement modes, rule structure, Kubernetes vs Cilium network policies
- Service Mesh — 16%: Ingress and Gateway API routing, service mesh use cases, encryption in transit, sidecar vs sidecarless designs
- Network Observability — 10%: Hubble capabilities, Layer 7 visibility, Hubble CLI and UI
- Installation and Configuration — 10%: using the Cilium CLI to install, query and change settings, run connectivity tests and check status
- Cluster Mesh — 10%: multi-cluster connectivity, cross-cluster service discovery and load balancing
- eBPF — 10%: eBPF’s role in Cilium, its benefits, eBPF vs iptables-based platforms
- BGP and External Networking — 6%: egress connectivity requirements, connecting Cilium clusters to external networks
Source: Linux Foundation Education — Cilium Certified Associate (CCA). Checked 14 October 2026.
Cilium certification prerequisites
There are no prerequisites for the CCA. The Linux Foundation does, however, recommend knowledge of Kubernetes and basic networking, including the 7-layer model and protocols such as TCP, UDP, DNS and HTTP.
CNCF describes candidates who already hold KCNA, CKA or CKAD as ideal. That is context, not a requirement: the CCA can be your first CNCF certification, but questions assume you know what a pod, a service and a network policy are.
Source: Linux Foundation Education — Cilium Certified Associate (CCA). Checked 14 October 2026.
How long is the CCA certification valid?
The CCA is valid for 2 years. The Linux Foundation’s FAQ for multiple-choice exams states that you renew by retaking and passing the exam before the expiration date, and that the renewed certification stays current for a further 2 years from the date you pass.
There is no continuing-education route mentioned; renewal means sitting the exam again.
Source: Linux Foundation — FAQ for multiple-choice exams. Checked 14 October 2026.
CCA study resources and exam rules
The open-sourced CNCF curriculum is the reference for scope, and the official Cilium documentation covers every component the domains name, from IPAM modes to Hubble and Cluster Mesh. A local cluster with Cilium installed through the Cilium CLI lets you see policy enforcement and Hubble flows for yourself, which makes the multiple-choice scenarios far easier to reason about.
On shortcuts: the Linux Foundation’s certification agreement prohibits disclosing, publishing or transmitting any exam content and treats disseminating actual exam content, including web postings, as misconduct. Sanctions include revoking any certifications you have earned and barring you from future Linux Foundation exams.
Source: Linux Foundation — Global Certification and Confidentiality Agreement. Checked 14 October 2026.
CCA vs KCNA
Both are online, proctored, multiple-choice CNCF certifications at $250 including one free retake, but they cover different ground. CNCF describes the KCNA as demonstrating foundational knowledge and skills in Kubernetes and calls it a pre-professional certification; the CCA goes deep on one layer — networking, security and observability with Cilium.
CNCF lists KCNA holders among ideal CCA candidates, which reflects the natural order: Kubernetes basics first, then the networking layer underneath. If you run or plan to run Cilium in production, the CCA is the more specific credential.
Source: CNCF — Kubernetes and Cloud Native Associate (KCNA). Checked 14 October 2026.
Cilium Certified Associate practice questions
Certsqill’s CCA practice questions are expert-developed and mapped to the eight official domains. Every answer option comes with an explanation, and your readiness score is broken down per domain, so a weak spot in eBPF or Cluster Mesh shows up before exam day rather than on it.
Access comes with a 7-day money-back guarantee.
CCA questions people ask
What is the Cilium Certified Associate?
An entry-level Linux Foundation and CNCF certification that confirms knowledge of connecting, securing and observing Kubernetes clusters using Cilium. Checked 14 October 2026.
How much does the CCA exam cost?
$250, including one free retake. A bundle with a THRIVE-ONE subscription costs $495. Source: Linux Foundation and CNCF, checked 14 October 2026.
How long is the CCA exam?
90 minutes. Source: Linux Foundation Education, checked 14 October 2026.
How many questions are on the CCA exam?
The Linux Foundation and CNCF do not publish the number of questions. Checked 14 October 2026.
What is the CCA passing score?
75%, per the Linux Foundation FAQ for its multiple-choice exams. Checked 14 October 2026.
Is the CCA exam hands-on?
No. It is an online, proctored, multiple-choice exam. Source: Linux Foundation and CNCF, checked 14 October 2026.
Are there prerequisites for the Cilium certification?
No. Kubernetes and basic networking knowledge are recommended but not required. Source: Linux Foundation Education, checked 14 October 2026.
Which CCA domain carries the most weight?
Architecture, at 20%, followed by Network Policy at 18%. Source: Linux Foundation Education, checked 14 October 2026.
How long is the CCA valid?
2 years. You renew by passing the exam again before it expires. Source: Linux Foundation, checked 14 October 2026.
