CNCF certifications come in two very different kinds. The associate exams - KCNA and KCSA - are multiple choice and need no cluster experience. The rest are performance-based: you get a live Kubernetes cluster, a terminal and a time limit, and you either complete the tasks or you do not. That gap is the biggest surprise for people stepping up from KCNA, so the path below keeps the two apart. The project exams sit alongside the Kubernetes ladder rather than above it - each certifies one CNCF project.
How CertGrid reviews questions
- Mapped to current exam objectives
- Includes an explanation for every answer
- Reviewed for weak or giveaway distractors
- Reviewed when exam objectives change
Associate
Multiple choice, and no cluster experience needed.- KCNAKubernetes and Cloud Native AssociateKubernetes and cloud native fundamentals: architecture, containers, and the wider CNCF landscape. The usual entry point.View KCNA practice exam →
- KCSAKubernetes and Cloud Native Security AssociateCloud native security fundamentals: the Kubernetes threat model, hardening, and platform security controls.View KCSA practice exam →
Administrator and Developer
Performance-based: a real cluster and a terminal.- CKACertified Kubernetes AdministratorCertified Kubernetes Administrator: cluster architecture, workloads, networking, storage and troubleshooting, all hands-on.View CKA practice exam →
- CKADCertified Kubernetes Application DeveloperCertified Kubernetes Application Developer: designing, building and deploying applications on Kubernetes. For developers.View CKAD practice exam →
Specialist
Advanced, and the one exam here with a hard prerequisite.Project exams
One CNCF project each, at associate level.- Certified Argo Project Associate (CAPA)The Argo suite - CD, Workflows, Rollouts and Events - and how they fit a GitOps delivery pipeline.View CAPA practice exam →
- Certified GitOps Associate (CGOA)GitOps principles in practice: declarative configuration, reconciliation, and managing drift.View CGOA practice exam →
- Istio Certified Associate (ICA)The Istio service mesh: traffic management, resilience, security and observability.View Istio ICA practice exam →
- Prometheus Certified Associate (PCA)Prometheus monitoring: metrics, PromQL, alerting rules and instrumentation.View Prometheus PCA practice exam →
Compare popular exams
How CertGrid helps you pass
Every exam in this path has a full CertGrid practice bank: hundreds of exam-style questions, an explanation for every answer (including why each wrong option is wrong), and timed mock exams that score like the real thing. Start free and upgrade to Pro for unlimited practice across the whole path.
Frequently asked questions
Which Kubernetes certification should I take first?
KCNA if you are new to Kubernetes - it is multiple choice and needs no cluster experience. If you already administer clusters day to day, go straight to CKA. KCNA is not a prerequisite for anything.
What is the difference between CKA and CKAD?
CKA is for people who run clusters: architecture, networking, storage and troubleshooting. CKAD is for people who deploy applications onto them: pods, configuration and observability. Both are performance-based and similar in length, so pick the one that matches your job rather than doing both.
Do I need CKA before CKS?
Yes, and this one is actually enforced. CKS requires an active, unexpired CKA at the time you book - unusual in this ecosystem, where every other exam is open to anyone.
Are the CNCF exams multiple choice?
Only the associate ones. KCNA, KCSA, CAPA, CGOA, ICA and Prometheus PCA are multiple choice. CKA, CKAD and CKS put you in a live cluster with a terminal and score what you actually build.