KCSA Exam Format and Domain Weights
KCSA is multiple choice - 60 questions in 90 minutes - and it wants 75%, which is the highest threshold of any exam on this site. This guide reads the shipped question pool to show what the six domains weigh, and works out what that pass mark actually leaves you.
Orientation Guide 1 of 42 Beginner
- Kubernetesapiserver v1.36.4, kubelet v1.36.3
- Runtimecontainerd 2.2.6
- CNICilium 1.18.1 - tunnel/VXLAN, with Hubble relay and UI
- Host OSUbuntu 26.04 LTS, kernel 7.0.0-29
- Built withkubeadm v1.36.3 - podSubnet 10.244.0.0/16, serviceSubnet 10.96.0.0/12
- TimeAbout 12 min
- Reviewed25 August 2026
Written against the versions above. Domain weights are the published ones, verified against the Linux Foundation certification page and against the draw weights this site samples mocks at: 14/22/22/16/16/10. Where a number here is the pool's rather than the blueprint's, the page says which.
| Server Name | IP Address | OS | Roles | CPU | RAM | HDD |
|---|---|---|---|---|---|---|
| CKA5001 | 192.168.0.41 | Ubuntu 26.04 LTS | Control Plane Node (tainted NoSchedule) | 2 Core | 4 GB | 50 GB |
| CKA5001-NODE01 | 192.168.0.42 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
| CKA5001-NODE02 | 192.168.0.43 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
| CKA5001-NODE03 | 192.168.0.44 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
Before you start
-
The six domains, and the error budget
Read the blueprint and the pool side by side. They are not the same number.
bash Example session cd ~/kcsamock && python3 domains.pypool 889 questionsone exam 60 questions in 90 minutes (90 s each)pass mark 75% -> 45 correct of 60error budget 15 wrong, total. D domain blueprint of 60 pool pool% mocks 1 Overview of Cloud Native Security 14% 8.4 96 10.8% 11.4 2 Kubernetes Cluster Component Security 22% 13.2 194 21.8% 14.7 3 Kubernetes Security Fundamentals 22% 13.2 221 24.9% 16.7 4 Kubernetes Threat Model 16% 9.6 141 15.9% 14.7 5 Platform Security 16% 9.6 166 18.7% 17.3 6 Compliance and Security Frameworks 10% 6.0 71 8.0% 11.8 BLUEPRINT is what you are asked. POOL is only how much distinct practice exists.They differ here - domain 1 is 14% of the exam and 10.8% of the pool - and the mock isdrawn at the blueprint weight, so the pool share never reaches the candidate. Domains 2 and 3 are 44% of the paper between them: 26 of the 60 questions.Compliance is 10% - 6 questions - against an error budget of 15. It is not theone to skip; skipping it spends a third of the allowance before you begin.Expected result60 questions in 90 minutes, 90 seconds each, 75% to pass - so 45 of 60 correct and 15 wrong is the whole allowance. Domains 2 and 3 are 22% each; Compliance is 10%.
Success conditionYou know where the marks are and how few you can lose.
Troubleshooting
Sources quote different domain percentages.
Why: Some quote a question pool's proportions rather than the published blueprint.
Fix:The blueprint is 14/22/22/16/16/10. That is what a paper is built from.
Aiming at exactly 75%.
Why: It leaves no margin - 15 wrong is the whole allowance.
Fix:Aim well clear. Practise until the weakest domain is comfortable, not passable.
Treating Compliance as optional.
Why: It is the smallest domain, so it looks skippable.
Fix:10% of 60 is 6 questions against a 15-question budget. It is 40% of your margin.