Other Certifications · CNCF ladder · KCNA

KCNA — Kubernetes and Cloud Native Associate

The CKA profile on this course already told you where this one sits: "below the CKA, as the knowledge-based, no-prerequisite entry point." This page is that entry point in full. The Kubernetes and Cloud Native Associate is a 60-question, multiple-choice exam about cloud native concepts — no terminal, no live cluster, nothing to build or fix. It exists for exactly the person the CKA intimidates: someone who wants to prove real, structured knowledge of Kubernetes and the CNCF landscape before committing hours to a hands-on exam that grades a live cluster under a clock. Below: what it actually tests, the five official domains and their weights, a direct side-by-side against the CKA, and how much of this course already prepares you for it.

☺ Explain it like I'm 10

The CKA page on this course compared itself to a cooking exam: a real kitchen, a broken oven, dishes to actually produce, no partial credit for knowing the theory. KCNA is the exam that comes before anyone hands you a knife. It's the food-safety quiz — multiple-choice questions about what a walk-in fridge is for, why raw chicken and lettuce need separate boards, what temperature makes food safe. You could pass it having never touched a stove. That's not a flaw in the test. It's testing something real and useful on its own: do you understand the kitchen, conceptually, before anyone cares whether your knife skills exist yet.

🦉🐰Your hosts for this topic: Professor Owl & Remy the Rabbit — Owl lays out the whole cloud native landscape before anyone touches a keyboard, and Remy drills the instant, no-hesitation recall a 60-question multiple-choice exam actually rewards. Neither of them needs a terminal for this one; that's Benny's exam, not theirs.

What the KCNA actually tests, and who it's for

☺ Like you're 10: It checks whether you understand Kubernetes and the cloud native world conceptually — not whether you can operate any of it yet.

The Kubernetes and Cloud Native Associate (KCNA) is administered by The Linux Foundation on behalf of the CNCF and was introduced in 2021 as a deliberately gentler on-ramp to the certification ladder the CKA sits on. It certifies foundational knowledge: what Kubernetes' core objects are and roughly how they fit together, what a container actually is versus a VM, what the wider cloud native landscape looks like — observability, service meshes, CI/CD, the CNCF's own project maturity levels — and how the pieces of that ecosystem relate to each other. It does not certify that you can build, operate, or troubleshoot any of it. That distinction is the entire point of the exam, not a limitation of it.

It's aimed at exactly the population the CKA's performance-based format screens out by design: people early in a cloud native career, developers who deploy onto Kubernetes but have never administered a cluster, and — genuinely — non-engineering roles that need real fluency in the vocabulary without ever opening a terminal: technical product managers, sales engineers, support staff, technical writers. If your job touches Kubernetes conversationally more than it touches a kubectl prompt, this exam was built with you specifically in mind.

◆ Key idea

KCNA is not a formal prerequisite for the CKA, the CKAD, or the CKS — none of the CNCF's certifications require it. It's a recommended starting line, not a locked gate. You can walk straight up to the CKA with zero certifications behind you if you're confident in your hands-on skill; KCNA exists for the (very large) group of people who aren't confident yet and want a lower-stakes, cheaper way to build and prove the vocabulary first.

The format, in full

☺ Like you're 10: 60 questions, 90 minutes, closed book, no prerequisites — the opposite shape of the CKA in almost every dimension that matters.

Every fact below is what The Linux Foundation and CNCF generally publish and what candidates consistently report. Treat it as a reliable planning baseline, not a locked contract — the warning box further down explains what to check before you register.

ItemDetail
Format100% multiple choice — single-answer questions delivered through a secure browser, sat at a normal desktop. No terminal, no live environment, nothing to build.
Question count60 questions
Duration90 minutes
Passing scoreInformally and consistently reported around 75%; The Linux Foundation does not always publish an exact cut score, since it can shift with psychometric analysis of the question bank — verify at the official page rather than banking on this number.
Open-book policyClosed book. No documentation tab, no notes, no second monitor — the opposite of the CKA's narrow kubernetes.io/docs allowance.
Validity3 years from the date you pass — a full year longer than the CKA's 2-year validity, consistent with how The Linux Foundation treats its associate-level exams generally.
DeliveryOnline, remotely proctored through a secure browser, webcam and microphone required, ID check before the clock starts — same proctoring vendor and process family as the CKA.
RetakeRegistration has historically included one free retake, same as the CKA.
PriceHistorically around USD $250 list — meaningfully cheaper than the CKA's roughly $395–445, in line with other associate-level Linux Foundation exams.
PrerequisitesNone — and unlike the CKA's "none formally, but come with real experience" framing, KCNA genuinely expects no prior hands-on Kubernetes work. It's written for people who haven't touched a cluster yet.

The one detail worth over-explaining: a multiple-choice exam like this one is recognition, not recall-under-verification. The CKA hands you a broken cluster and grades whatever state it's in when time runs out — you have to produce the fix yourself and confirm it worked. KCNA hands you a scenario and four options and asks you to recognize the correct one — the answer already exists on the screen, your job is picking it out from three plausible-sounding wrong ones. That's a genuinely different skill, and it's why the two exams reward completely different study habits, covered further down.

The CNCF ladder — where KCNA sits KCNA entry · knowledge-based no prerequisites CKAD practitioner · performance-based CKA practitioner · performance-based CKS requires an active CKA security specialist recommended, not required
⚠ Verify before you book

Price, passing score, and the exact question count all change — The Linux Foundation has revised each of them before across its associate-level exams. Nothing on this page is authoritative; this site is independent and unofficial. Confirm current details on the official KCNA page before you pay for anything.

↗ Linux Foundation official KCNA page

The five domains and their weights

☺ Like you're 10: Five topics, heavily lopsided — almost half the exam is just "what is Kubernetes and how are its pieces arranged."

The CNCF publishes a versioned curriculum for KCNA with five domains that sum to exactly 100%. Compare the shape to the CKA's: the CKA spreads its weight fairly evenly across five domains topped by Troubleshooting at 30%. KCNA does the opposite — it concentrates nearly half the exam in a single domain and lets the rest trail off sharply.

🦉Kubernetes Fundamentals
46%
🐙Container Orchestration
22%
🏗️Cloud Native Architecture
16%
🐘Cloud Native Observability
8%
🦫Cloud Native Application Delivery
8%

Kubernetes Fundamentals (46%) is close to half the exam on its own: the control plane and node components, the API primitives — Pods, ReplicaSets, Deployments, Namespaces, Services — scheduling basics, and the multi-container Pod design patterns (sidecar, ambassador, adapter). Container Orchestration (22%) steps back one layer, to orchestration concepts generally: container runtimes (containerd, CRI-O), the Container Runtime Interface, Container Network Interface, and Container Storage Interface as abstractions, and baseline container security concepts. Cloud Native Architecture (16%) is the domain most unlike anything the CKA touches: autoscaling patterns, serverless, and — a genuinely distinctive sub-topic — CNCF community and governance, including the maturity ladder a CNCF project climbs from sandbox to incubating to graduated. Observability (8%) and Application Delivery (8%) are both light touches: the vocabulary of metrics, logging, and tracing on one side, and CI/CD plus GitOps concepts on the other, without depth on any single tool.

The exact bullet wording under each domain shifts a little between curriculum revisions, the way it does for the CKA — confirm the current version against the CNCF's published curriculum before you build a study plan around this breakdown.

Even at the "recognition, not recall" level the exam operates at, KCNA still expects you to read Kubernetes YAML fluently — not write it from a blank file, but recognize what's valid, what's missing, and what a given manifest actually does:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: web
spec:
  replicas: 3
  selector:
    matchLabels: { app: web }
  template:
    metadata:
      labels: { app: web }
    spec:
      containers:
        - name: web
          image: nginx:1.27
          ports:
            - containerPort: 80

KCNA won't ask you to produce this from scratch under a clock the way the CKA would. It's far more likely to show you four near-identical versions of it and ask which one is valid, what happens to running Pods if replicas is removed entirely, or which field a matching Service's selector actually needs to reference. Same object, completely different kind of question.

KCNA versus CKA — the direct contrast

☺ Like you're 10: Same ecosystem, almost opposite exam in every dimension that matters — format, cost, stakes, and what "passing" actually proves.

These two sit one rung apart on the same ladder, and it's worth being precise about exactly how different the experience of sitting each one actually is, because the difference is bigger than "one is easier."

KCNACKA
QuestionDo you understand cloud native concepts?Can you actually run a cluster?
Format60 multiple-choice questions15–20 hands-on tasks on live clusters
EnvironmentA normal desktop, closed bookA browser-based terminal against real clusters, open-book (kubernetes.io/docs only)
Duration90 minutes2 hours
Passing score~75% (informally reported)66%
Validity3 years2 years
Price (list)~$250~$395–445
PrerequisitesNone — genuinely written for beginnersNone formally, but assumes real hands-on experience
What a pass actually provesYou know the vocabulary and can reason about the concepts on paperYou can build, fix, and operate a cluster under time pressure
Best first move forComplete beginners; developers who deploy but don't administer; non-engineering roles needing real fluencyAnyone already operating clusters, or ready to prove they can

The honest way to read that table: KCNA is lower-stakes on every axis at once — cheaper, shorter, no live environment to fail in front of, and a full extra year before it expires. That's a feature, not a discount. It exists so the CKA's format doesn't become the thing that talks someone out of starting the ladder at all. If the idea of a proctor handing you a broken cluster and a two-hour clock is what's kept you from booking anything, KCNA is the exam built specifically to get you moving without that fear being relevant yet.

What this course already covers — and the real gap

☺ Like you're 10: You already know a solid chunk of the "what is it" half. The rest is mostly vocabulary this course only touches in passing.

Containers & orchestration and the Kubernetes tool page teach the concepts KCNA's biggest domain draws on — but they teach them at the altitude of someone about to deploy onto a cluster, with worked kubectl examples and YAML you're expected to write. KCNA never asks you to write anything; it asks you to recognize concepts fluently instead. That gap between "learned it to use it" and "learned it to recognize it on a multiple-choice line" is smaller than it sounds, but it's real.

KCNA domainCovered hereThe real gap
Kubernetes Fundamentals · 46%Strong overlap — containers & orchestration and the Kubernetes tool page cover the control plane, Pods, Deployments, Services, and Namespaces in real depthMulti-container Pod design patterns (sidecar, ambassador, adapter) aren't named explicitly anywhere on this course
Container Orchestration · 22%Container fundamentals from the same two pages; Helm for packagingContainer runtime internals (containerd vs. CRI-O) and the CNI/CSI/CRI interfaces as named abstractions, not just "Kubernetes handles networking"
Cloud Native Architecture · 16%The DevOps toolchain maps the broader tool landscape by categoryCNCF community and governance specifically — the sandbox → incubating → graduated project maturity ladder isn't covered anywhere on this course, since it's CNCF-organization trivia rather than a DevOps practice
Cloud Native Observability · 8%Monitoring & observability plus the Prometheus and Grafana tool pages cover the vocabulary directlyMinimal — this domain is only 8% of the exam and this course's coverage is already close to a 1:1 match
Cloud Native Application Delivery · 8%CI/CD pipelines and deployment strategies cover the concepts directly; Argo CD for GitOps specificallyMinimal — same story as Observability, another 8% domain that's already close to fully covered

The honest summary: this course gets you strong, genuine coverage on four of the five domains worth 84% of the exam combined. The one real gap — CNCF community and governance inside Cloud Native Architecture — is a small, fast, memorizable slice of a 16% domain, not a structural hole. If you've worked through this course's Foundations and Infrastructure & Operations sections in order, you are closer to exam-ready for KCNA than for almost any other certification on this shelf.

How to actually prepare for a knowledge-based exam

☺ Like you're 10: This is the one certification on this course where flashcards genuinely work — because the real exam is also just recognizing the right answer from a list.

This is the mirror image of preparing for the CKA. There's no cluster to sabotage, no muscle memory to build, no clock pressure that rewards typing speed. What matters here is breadth of vocabulary and the ability to recognize a correct definition or a valid manifest instantly, under a fairly generous 90-second-per-question pace.

◆ Key idea

The CKA's prep advice is "build real, disposable clusters, repeatedly." KCNA's prep advice is closer to "read broadly, then drill narrowly." If you catch yourself opening a terminal to study for this exam, you're studying for the wrong exam — that instinct is exactly right for the CKA, and exactly wasted here.

Exam-day logistics

☺ Like you're 10: Same remote-proctoring process as the CKA — ID check, room scan, webcam on — just with nothing to fix once the clock starts.

KCNA is delivered through the same remote-proctoring family as the CKA: a secure browser, webcam and microphone required, an ID check and room scan before the timer starts. The meaningful difference is what happens after that. There's no environment to load, no cluster to wait on, no terminal to get comfortable in — just a sequence of questions, one at a time, with the option to flag and return to ones you're unsure about.

🐰 Remy's pre-exam checklist

Walk it in order: (1) run the system check from your exam dashboard a day or two ahead, not the morning of; (2) clear the desk and room you'll test in — a proctor can ask you to pan the camera around it, same as the CKA; (3) have a government-issued photo ID ready, name matching your registration exactly; (4) do one full-length practice set under a loose 90-minute clock so the pacing isn't a surprise; (5) flag anything you're not instantly sure about and keep moving — with 60 questions in 90 minutes, getting stuck on one is a worse use of time than coming back to it fresh.

Where KCNA sits on the ladder, and what to do next

☺ Like you're 10: It's the first rung, not the whole ladder — know what sits beside it and above it before you plan the rest of your route.

Treat the CNCF's certifications as a small floor plan, the same way the CKA profile does. KCNA sits at the entry level: knowledge-based, no prerequisites, cheapest and shortest of the family. CKA and CKAD sit side by side one rung up, at practitioner level — same performance-based style as each other, different half of Kubernetes: CKA is the cluster the workloads run on, CKAD is the workloads themselves. Above both, CKS requires an active CKA as a formal prerequisite and goes deep on hardening, supply-chain, and runtime security. None of that is a required path from here — KCNA doesn't unlock anything — but it is the sequence that makes each next exam feel like a smaller step than it would cold.

Off to the side of the CNCF ladder entirely sit the tool- and vendor-specific certifications on this course's certifications hub: the Terraform Associate, which is the closest thing to a KCNA equivalent for infrastructure as code — cheap, knowledge-based, no prerequisites — and the vendor-specific tracks like Azure DevOps Engineer Expert or the Google Cloud Professional DevOps Engineer, which assume real production experience the way the CKA does, just pointed at a specific cloud instead of at Kubernetes. If you're genuinely undecided where to start and have never sat a certification exam before, KCNA and the Terraform Associate are this course's two lowest-stakes on-ramps — pick whichever concept gap actually matches your day job, then use that first pass to build the exam-taking muscle before anything performance-based.

🎬 At the Ship-It Guild
🦊

Foxy: I want to get on this CNCF ladder everyone keeps mentioning, but the CKA terrifies me. A live cluster, a two-hour clock, no going back?

🦉

Professor Owl: Then don't start there. KCNA is the same ladder, Foxy — sixty questions, ninety minutes, closed book, no cluster to break.

🐰

Remy the Rabbit: It's basically my format. Read a scenario, recognize the right answer, move on. No typing, no verifying, no drain-and-uncordon sequence to remember under pressure.

🦫

Benny the Beaver: Which is exactly why it's not my exam. I'd rather they hand me a broken cluster than four multiple-choice options about one.

🐢

Timmy the Turtle: Different tools test different things, Benny. A pass here proves Foxy knows the map. It doesn't promote her onto a production cluster — that verification still belongs to the CKA.

🦊

Foxy: So this is the "prove I know what I'm talking about" exam, and CKA is the "prove I can actually do it" exam.

🦉

Professor Owl: Exactly that. And there's no shame in taking the first rung before the second — most people who skip straight to the CKA cold regret it by the sixty-minute mark.

🐢 Timmy's checkpoint

1. What format is the KCNA exam, and how many questions does a candidate see in how much time? 2. Name three ways the KCNA's logistics differ from the CKA's — think price, validity, and open-book policy specifically. 3. Which KCNA domain carries the largest weight, and roughly what does it cover? 4. Is KCNA a formal prerequisite for the CKA, CKAD, or CKS? 5. Name one KCNA domain this course already covers closely, and one genuine gap. 6. Who is KCNA written for that the CKA's format tends to screen out?

Check your answers
  1. 100% multiple choice — 60 questions in 90 minutes, closed book, no terminal or live environment involved.
  2. Any three of: KCNA costs roughly $250 versus the CKA's roughly $395–445; KCNA is valid for 3 years versus the CKA's 2 years; KCNA is closed book while the CKA allows a narrow kubernetes.io/docs tab; KCNA's passing score is informally around 75% versus the CKA's published 66%.
  3. Kubernetes Fundamentals, at 46% — the control plane and node components, core API primitives like Pods, Deployments, and Services, scheduling basics, and multi-container Pod design patterns.
  4. No. KCNA is a recommended starting point, not a required one — none of the CKA, CKAD, or CKS formally require it.
  5. Any domain-gap pair such as: Kubernetes Fundamentals is covered closely by containers & orchestration and the Kubernetes tool page; the genuine gap is CNCF community and governance (the sandbox → incubating → graduated project maturity ladder) under Cloud Native Architecture, which this course doesn't teach anywhere else.
  6. People early in a cloud native career, developers who deploy onto Kubernetes without administering it, and non-engineering roles — product managers, sales engineers, support staff — who need real fluency in the vocabulary without ever needing a terminal.