Limited time: Get 2 months free with annual plan — Claim offer →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing
Start for free
Exam GuidesCNCFCKA
CNCFProfessional Level2026 Updated

Certified Kubernetes Administrator Exam Guide 2026: Everything You Need to Pass

Updated May 1, 202612 min readWritten by Certsqill experts
Quick facts — CKA
Exam cost
$395 USD
Questions
15–20 performance tasks
Time limit
2 hours
Passing score
66%
Valid for
3 years
Testing
PSI (browser-based)

Who this exam is for

The Certified Kubernetes Administrator certification is designed for professionals who work with or want to work with CNCF technologies in a professional capacity. It is taken by cloud engineers, DevOps practitioners, IT administrators, and technical professionals looking to validate their expertise.

You do not need extensive prior experience to attempt it, but you will benefit from hands-on familiarity with the subject matter. The exam tests applied knowledge and architectural judgment, not just memorization. If you can reason about trade-offs and real-world scenarios, structured practice will handle the rest.

Domain breakdown

The CKA exam is built around official domains, each with a fixed percentage of the question pool. This distribution should directly inform how you allocate your study time.

Domain
Weight
Focus areas
Cluster Architecture, Installation & Configuration
25%
kubeadm cluster bootstrapping, etcd backup/restore, TLS certificate management, RBAC, upgrade procedures.
Workloads & Scheduling
15%
Deployments, DaemonSets, StatefulSets, resource requests/limits, node selectors, taints/tolerations, affinity rules.
Services & Networking
20%
ClusterIP vs NodePort vs LoadBalancer, Ingress controllers, NetworkPolicy, CoreDNS troubleshooting, CNI plugin configuration.
Storage
10%
PersistentVolumes, PersistentVolumeClaims, StorageClasses, volume access modes, dynamic provisioning.
Troubleshooting
30%
Node and cluster component failures, pod crash debugging, application log analysis, kube-apiserver access issues.

Note the domain with the highest weight — many candidates under-invest here because it feels conceptual. In practice, this is where the exam is most precise, with scenario-based questions that test specifics.

What the exam actually tests

This is not a memorization exam. Questions require applied judgment under constraints. Almost every question includes a scenario with explicit requirements and asks you to select the most appropriate solution.

Here are examples of the question types you will encounter:

Live cluster tasks
"Create a Deployment named web-app with 3 replicas of image nginx:1.25 in the production namespace. Ensure the pods tolerate the node taint environment=prod."
All CKA tasks are hands-on in a live Kubernetes environment. You type kubectl commands, edit YAML, and verify your work. No multiple choice.
etcd backup/restore
"Take a snapshot of the etcd cluster to /opt/backup/etcd.db and verify the snapshot is valid."
etcdctl commands and TLS certificate paths must be memorized. This task appears on almost every CKA exam.
RBAC creation
"Create a ClusterRole that allows get, list, and watch on pods. Bind it to a ServiceAccount named monitor in the staging namespace."
Requires kubectl create clusterrole and clusterrolebinding in sequence. The task wording deliberately omits hints about which resources to create.

How to prepare — 4-week study plan

This plan assumes one hour per weekday and roughly 30 minutes of lighter review on weekends. It is calibrated for someone with some relevant experience. If you are starting from zero, add an extra week before Week 1 to familiarise yourself with the basics.

W1
Week 1: Core architecture + kubectl fluency
  • Set up a local cluster with kind or minikube for daily practice
  • Core objects: Pods, Deployments, Services, Namespaces
  • kubectl imperative commands: create, run, expose, set image
  • YAML generation with --dry-run=client -o yaml — use this constantly
W2
Week 2: Networking + Storage
  • Services: ClusterIP, NodePort, LoadBalancer — create and test each
  • Ingress: create rules, understand path-based vs host-based routing
  • NetworkPolicy: default-deny ingress, allow specific pod selectors
  • PV/PVC: create, bind, mount — practice the full lifecycle
W3
Week 3: Cluster admin + RBAC + Troubleshooting
  • kubeadm init and join workflow — understand each component
  • etcd backup with etcdctl snapshot save — memorize the TLS flags
  • RBAC: Roles, ClusterRoles, bindings — create with kubectl
  • 10 troubleshooting scenarios: broken nodes, failing pods, DNS issues
W4
Week 4: Timed practice + Speed drills
  • Killer.sh simulator (2 free sessions included with exam): attempt both
  • Focus on tasks you complete slowest — speed matters as much as accuracy
  • Alias setup: alias k=kubectl; export do=--dry-run=client -o yaml
  • Final day: rest. Do not attempt new material 24 hours before exam.

Common mistakes candidates make

These patterns appear repeatedly among candidates who resit this exam. Knowing them in advance is worth several percentage points.

Not practicing with real time pressure
The CKA is 2 hours for 15–20 tasks. Many candidates can do each task in isolation but fail to finish under time pressure. Killer.sh timed sessions are mandatory practice, not optional.
Forgetting to switch contexts between tasks
Each task specifies a cluster context. Failing to run kubectl config use-context before starting a task means your changes go to the wrong cluster and score zero.
Handwriting YAML from scratch
Use kubectl create --dry-run=client -o yaml to generate base YAML then edit it. Writing YAML from memory wastes minutes and introduces typos. The exam permits this and expects it.
Skipping etcd backup practice
etcdctl has multiple flags (--endpoints, --cacert, --cert, --key) that must be typed exactly right. Candidates who have never practiced this task lose 5–8 minutes fumbling the command on exam day.

Is Certsqill right for you?

Honestly: Certsqill is built for candidates who have already done some studying and want to convert knowledge into exam performance. If you have never touched the subject, start with a foundational course first — then come to Certsqill when you are ready to practice.

Where Certsqill is strong: question depth, AI-powered explanations, and domain analytics. Every question is mapped to the exam blueprint. When you get something wrong, the AI tutor explains why the right answer is right and why each wrong answer fails under the specific constraints in the question.

Where Certsqill is not a replacement: video courses and hands-on labs. Use Certsqill to test and sharpen — not as your first exposure to a topic you have never encountered.

Ready to start practicing?
720 CKA questions. AI tutor. 5 mock exams. 7-day free trial.