Common Preparation · Exam Day — Across Formats

Exam Day — Across Formats

This course teaches nine exams — eight CNCF project associates plus the Linux Foundation's own LFCS — and they do not all hand you the same kind of exam room. Seven are pure multiple choice. One, ICA, is hybrid: real hands-on tasks mixed with multiple-choice questions in the same sitting. One, LFCS, is fully performance-based: a live terminal, a real machine, and nothing to pick from a list at all. What makes exam day genuinely plannable despite that split is that the security gate in front of all nine is nearly identical — the same system check, the same ID rule, the same webcam room scan, the same queue for a proctor — and only what happens after that gate changes. This page separates the two cleanly: the logistics that are worth rehearsing once and reusing for every one of the nine, and the format-specific differences that will actually catch you if you walk in assuming the wrong room is behind the door.

☺ Explain it like I'm 10

Picture three testing rooms down the same hallway, all behind the exact same front desk. At the desk, someone checks your photo ID against your face, watches you carry your webcam slowly around an empty room, and clears you into whichever room your ticket says. Behind door one is a quiz — four choices per question, a flag button, and nothing else in the room. Behind door two is a real workbench with a half-built project and a to-do list, but you also answer a handful of quiz questions along the way. Behind door three there's no quiz at all — just the workbench, a to-do list, and two hours to leave it working. Same front desk, same ID check, same "nothing on the walls" rule, every time — but three completely different rooms once you're actually through the door, and the trick is knowing which door you're walking into before you get there.

🐢🦊Your hosts for this topic: Timmy the Turtle & Foxy — Timmy has the front-desk checklist memorized across all nine doors, and Foxy is the instinct that catches the moment someone assumes the wrong room is on the other side of it.

One proctoring script, three exam formats

☺ Like you're 10: The security check before the clock starts is nearly the same for all nine exams. What happens after the proctor lets you in is not — and it splits three ways, not two.

The Linux Foundation runs its entire training catalogue through a single identity-and-proctoring pipeline — currently PSI, at the time of writing. That's genuinely useful to you: booking, the ID rule, the room, the desk, check-in, and the proctor's authority over conduct are essentially identical whether you're sitting a ninety-minute knowledge-based associate like CGOA, the hybrid ICA, or the fully performance-based LFCS. What differs is everything that happens after the proctor releases the exam: the interface, the documentation you're permitted, and how the result is graded.

AspectShared by all nine examsWhere it splits by format
DeliveryOnline, from your own machine, remote-proctored with a live webcam, microphone, and screen share
IdentityOne government-issued photo ID, checked live against your face, spelled exactly as your registration spells it
Room & deskPrivate room, a cleared desk, a single monitor, a room scan before release
Check-inLaunch from the Linux Foundation portal ahead of your slot; system check, ID check, room scan, then a queue for a proctor
FormatKnowledge-based (7): CGOA, CAPA, CBA, CCA, KCA, OTCA, PCA — multiple-choice, no terminal in sight. Hybrid (1): ICA — hands-on tasks at a command line mixed with multiple-choice questions. Performance-based (1): LFCS — a live terminal only, nothing to select from a list
DurationKnowledge-based: 90 minutes. ICA: ~2 hours. LFCS: 2 hours
DocumentationKnowledge-based: closed-book — nothing permitted, because there's no terminal for an allowance to apply to. ICA: not published by the Linux Foundation for the hands-on half — confirm it yourself before building a study plan that assumes either answer. LFCS: the terminal is effectively its own documentation — man pages and whatever ships with the distribution, nothing from a browser
Graded onKnowledge-based: your selected answers, against a published 75% pass mark. ICA: a mix of selected answers and task outcomes; pass mark not published. LFCS: purely the end state of the machine, against a published 67% pass mark
NavigationKnowledge-based: flag, go back, and a review screen before you submit. ICA / LFCS: jump between tasks freely, flag for review
◆ Key idea

Rehearse the shared half once and it covers you for every one of these nine exams, plus every other Linux Foundation credential you ever sit. The sibling Kubernetes course's own exam-day page walks the identical pipeline in depth for the five-exam core (KCNA, KCSA, CKA, CKAD, CKS) this course assumes you already hold — including the clipboard shortcut and vim auto-indent trap that also apply the moment ICA's hands-on half or LFCS's live terminal puts you in front of a real shell. Rehearse the different half separately for each format you sit, because that is where the actual traps live.

The week before: the system check, your ID, and the eligibility clock

☺ Like you're 10: Test your camera, microphone, and internet a week early, not on the day. And double-check your ID matches your account, letter for letter — this part is identical no matter which of the nine you're sitting.

The Linux Foundation portal offers a system-compatibility check before you ever book a slot. Run it the week before, on the exact machine, in the exact room, on the exact network you intend to use — then run it again the night before. Running it for the first time twenty minutes before your slot is how people discover their webcam driver broke in an OS update, or that a locked-down work laptop's endpoint security blocks the proctoring client outright. This matters just as much for a ninety-minute CGOA sitting as it does for a two-hour LFCS session — the check-in gate doesn't care which room you're headed into.

Raw bandwidth is rarely the problem; stability is. For the two formats with a live terminal — ICA's hands-on half and LFCS — a remote desktop is an interactive stream, so a connection that stutters for a few seconds every couple of minutes will cost you more than a slow-but-steady one. Even for the seven multiple-choice exams, where nothing is streamed back to you, a dropped connection still risks losing your proctor's video feed of you mid-sitting. These commands touch nothing exam-related; they just tell you what your own link actually does at the time of day you've booked:

# run this about a week out, then again the night before, at your actual exam time
ping -c 30 8.8.8.8

curl -o /dev/null -s -w 'dns=%{time_namelookup}s connect=%{time_connect}s tls=%{time_appconnect}s total=%{time_total}s\n' https://training.linuxfoundation.org/

# sample stability across a window as long as the exam itself, not a few seconds
for i in $(seq 1 900); do
  date +%H:%M:%S
  ping -c 1 -W 2 8.8.8.8 2>/dev/null | grep -o 'time=[0-9.]*' || echo DROPPED
  sleep 2
done | tee ~/kubestronaut-exam-link-check.log

grep -c DROPPED ~/kubestronaut-exam-link-check.log

If that drop count isn't zero, fix it before exam day: plug into ethernet, move closer to the router, or move the slot to a quieter hour. On the day itself, close every other application, pause cloud sync and OS updates, and ask your household to stay off video calls for the window.

The identity rule is the same across the whole Linux Foundation catalogue, and it's binary — there is no appeal at check-in. Your ID must be government-issued (a student card or employee badge doesn't count), must carry a photo and a signature (with one carve-out: government-issued biometric IDs without a signature are accepted), must be currently valid, and the name on your Linux Foundation profile must match it exactly — in the ID's own script. Full detail lives in the Linux Foundation's own Candidate Identification and Authentication policy.

Separately, keep two clocks straight, and don't let a busy nine-exam campaign blur them together: an eligibility window that starts the moment you purchase the exam — around twelve months for most of the seven knowledge-based associates, per each one's own blueprint page on this course — and a certification validity period that starts the day you pass, generally two years across this ladder. Field Notes names the failure mode this produces at campaign scale: spreading nine exams out at an unhurried pace routinely takes years, comfortably past the window your earliest pass opened. Confirm both figures at checkout for the specific exam you're booking rather than trusting a number from any third-party site, this one included — and for ICA and LFCS specifically, this course's own blueprint pages decline to state an eligibility-window number at all, because the Linux Foundation hasn't published one consistently for either.

⚠ Do this today, not on exam day

Open your Linux Foundation profile and your physical ID side by side right now and compare them character by character, including middle names, diacritics, and the expiry date. If anything differs, raise it with Linux Foundation support immediately — a name correction can take days to process, and it is a far worse morning to discover the mismatch at check-in, whichever of the nine you were about to sit.

The room, the desk, and the room scan

☺ Like you're 10: An empty table, a room with a door you can close, nobody else inside, and a slow camera tour — identical whether you're about to answer a quiz or drive a live terminal.

The environment rules exist to make cheating hard, and the proctor enforces them literally rather than reasonably — the good news is that they're easy to satisfy if you prepare the room the night before instead of improvising at check-in, and none of what follows depends on which of the nine exams you're sitting. Your room needs to be private, with a door you can close — not a café, not an open-plan office, not a car — and nobody else may enter for the whole session, even briefly. It needs to be well lit with your face clearly visible, and quiet, because the microphone stays live the entire time.

Typically permittedTypically not permitted
Your computer, one keyboard, one mouse, and one displayA second monitor — unplug it and turn it away; "it's switched off" is often not accepted
Your physical ID documentNotes, printouts, sticky notes, a whiteboard in view
A drink in a clear, label-free container, if your handbook permits itPhones, smartwatches, fitness bands, earbuds
Declared, prescribed medical itemsHeadphones and headsets, in most policies
Glasses (you may be asked to remove and show them)Food, snacks, anything with visible packaging or text
Nothing else on the desk surface, honestlyPens and blank paper — LFCS and ICA's hands-on half supply their own on-screen tools; the seven MCQ associates need scratch space for nothing at all

That last row is worth reading twice: physical scratch paper is not permitted for any of the nine. It rarely comes up for the seven closed-book associates, since there's nothing to sketch before selecting an answer — but if your LFCS habit is to plan a partition layout on paper before typing the commands, or your ICA habit is to draft a VirtualService by hand first, break that habit before exam day. There is no equivalent at all for the seven MCQ associates, and no substitute for it on LFCS or ICA's hands-on half beyond whatever the exam interface itself provides.

Before the exam is released, the proctor asks for a slow 360° pan of the room: the desk surface and underneath it, the walls, the ceiling, and often the front and back of your monitor. Make it fast by making it boring — clear the desk the night before, take anything readable off the walls, put your phone in another room, and rehearse the pan once so you aren't fumbling live on camera.

Check-in, the queue, and the timeline

☺ Like you're 10: Start check-in about thirty minutes early. It's a queue, not a door — and none of that time counts against your exam clock, so being early is completely free, on all nine.

Check-in typically opens thirty minutes before your scheduled start, and you should use all of it: launch from the portal → the proctoring client runs a system and network check and asks for camera, microphone, and screen-share permissions → you're placed in a queue for a proctor → identity verification → the room and desk scan → the proctor confirms the rules and releases the exam → the timer starts. The queue is the part people forget about — at busy times you may wait, and that wait is on the proctor's side of the clock, not yours, which is precisely why starting at T-minus-30 rather than T-minus-5 is the difference between a calm start and a frantic one, whether the room behind the door turns out to be a quiz or a live terminal.

T−1 week system check ID vs profile T−1 night clear the desk unplug monitor 2 T−30 min launch check-in check-in ID · room scan proctor queue T−0 timer starts after results email none of this consumes exam time — being early is free the clock

Plan for no scheduled breaks, and assume the clock never stops. Some exams permit a short unscheduled break, but where they do it's on your time, must be cleared with the proctor first, and typically triggers re-verification — sometimes another room scan. Handle the practicalities before check-in: use the bathroom, have your permitted drink already on the desk, and don't load up on coffee an hour beforehand.

⚠ What gets a session flagged or terminated

Leaving the camera's view without permission · someone else entering the room · talking, or reading questions aloud · looking away from the screen repeatedly · a phone, watch, or second screen coming into view · covering the camera or microphone · another application or browser window open · visiting a site that isn't on the allowlist · attempting to copy exam content anywhere outside the exam. The exam is confidential — recording it, photographing it, or discussing specific questions or tasks afterward is a conduct violation, not a grey area, on any of the nine.

Once you're in: three screens, one grading philosophy each

☺ Like you're 10: One screen is a quiz with four choices. One is a quiz that occasionally hands you a real terminal. One is only a real terminal, the whole time.

This is where the three formats stop resembling each other at all. Rehearse the layout you'll actually see for whichever exam is next, because fumbling the interface in the first five minutes wastes real clock time on any of the three.

Knowledge-based CGOA·CAPA·CBA·CCA·KCA·OTCA·PCA Question 24 of ~60 "A CI job runs kubectl apply on every merge. Which GitOps principle does that break?" ◀ prev · flag ⚑ · next ▶ review screen before submit Docs: none — fully closed-book Graded on: selected answers · 75% to pass Duration: 90 minutes 7 of 9 exams Hybrid ICA — hands-on + multiple choice Task 6 of ~17 "Expose the checkout Deployment on port 8080 via a VirtualService" $ istioctl analyze -n launch $ kubectl apply -f vs.yaml plus four MC options, mixed in Docs: not published — confirm the handbook Graded on: answers + task outcomes Duration: ~2 hours 1 of 9 — the odd one out Performance-based LFCS — live terminal, no MCQ at all Task 6 of 17–20 "Mirror /dev/sdc and /dev/sdd, mount it persistently, prove it survives one failure" task navigator flags ⚑ below $ sudo -i $ mdadm --create /dev/md0 --level=1 man mdadm journalctl -k Docs: man pages + distro docs only Graded on: final machine state · 67% to pass Duration: 2 hours 1 of 9 — the only pure performance exam

For the seven knowledge-based associates, that's the entire interface: a question, four options, previous/next, a flag control, and a review screen listing every question's answered/unanswered/flagged state before you submit. There is no terminal, no live environment, and — worth repeating — no documentation of any kind. Never leave a question blank; nothing published indicates a penalty for a wrong answer, so an educated guess always beats a guaranteed zero, and every one of these seven shares the same published 75% pass mark, from the Linux Foundation's general Multiple Choice Exam FAQ rather than any cert-specific page.

For ICA, the browser gives you a mix: some screens look exactly like the knowledge-based interface above, and others drop you into a Linux remote desktop with a terminal against a real cluster, the same underlying product the hands-on Kubernetes exams use. The one detail this course's own ICA blueprint deliberately does not commit to is documentation access during the hands-on half — the Linux Foundation has never published it consistently, so treat any confident claim you read elsewhere as unverified and confirm it yourself in the current candidate handbook before you decide how much of Istio's YAML you need memorized versus merely known-where-to-find.

For LFCS, there's no multiple choice anywhere: 17–20 real tasks, solved on a live terminal, graded purely on the final state of the machine against a published 67% pass mark. Two habits are worth drilling until they're reflex, and they matter for ICA's hands-on half too. First, read exactly which host or context a task targets before you touch anything — LFCS tasks sometimes direct you to SSH to a designated host, and solving a task perfectly on the wrong machine scores zero, the same trap the sibling Kubernetes course's exam-day page describes for CKA's context switch. Second, verify before you move on — a fifteen-second check catches the typo that would otherwise silently cost you the whole task. Inside the remote desktop, clipboard shortcuts are Ctrl+Shift+C and Ctrl+Shift+V rather than the plain shortcuts your terminal already claims for something else, and you generally work as root via sudo -i once connected.

🐢 Timmy's dress rehearsal · 30 min

One week out, run the whole thing as theatre — but pick the recipe that matches whichever of the nine is actually next. If you're prepping one of the seven knowledge-based associates, close every tab entirely, set a timer for 90 minutes, and answer a full mock paper cold — CGOA and its siblings across every associate all have one. If you're prepping LFCS, clear the desk exactly as you will on the day, open only a terminal and its own man pages, and work through the practice task bank under a two-hour clock. If you're prepping ICA, do both in the same sitting — a mock question block, then a hands-on drill with no outside documentation open — because that's the one exam here that actually mixes the two skills in one room. You aren't practising the underlying tool in any of these three rehearsals — you're practising the conditions, so the only unfamiliar thing on your screen on the actual day is the content itself.

When it misbehaves

☺ Like you're 10: If your internet blips or the person watching says something, don't panic — stop, listen, and reconnect. Your progress usually isn't the thing at risk. Your time is.

It happens, and for all nine exams it's survivable if you know what to expect instead of guessing under pressure.

What happensWhat you do
The proctor messages you in chat or speaks over audioStop typing, read or listen immediately, and comply without arguing. Most queries are "please move back into frame" or "re-scan the desk," not an accusation.
Your connection drops mid-examReconnect immediately from the same portal link. For LFCS and ICA's hands-on half, the machine or environment you're working against lives on the exam provider's infrastructure, not your laptop, so it's untouched. For the seven knowledge-based associates, your answered questions are saved as you go. Either way, the timer does not pause for you.
The remote desktop freezes but the proctor call stays up (LFCS, ICA's hands-on half)Say so out loud rather than guessing whether to refresh — the proctor can often see the same freeze and will guide you through the fix
You genuinely can't get back inContact Linux Foundation support immediately, not the next morning — a report made minutes after the incident with exact timestamps is taken far more seriously than one made later
A permitted documentation page links somewhere off the allowlist (LFCS's man pages, or ICA if a specific allowance is confirmed)Don't follow it. Visiting anywhere off whatever's actually permitted is prohibited regardless of how it was reached
🦆 Dot's-eye view

"I'd passed three of the closed-book associates back to back and walked into LFCS on autopilot, half-expecting a review screen to bail me out if I fumbled a task. Then my connection dropped about ninety minutes in, mid-mdadm command, and for about ten seconds I was convinced the whole RAID array I'd just built was gone. It wasn't — the machine sat there exactly as I'd left it, because it was never running on my laptop in the first place. I reconnected from the same portal link, got re-verified, and picked the task back up. What actually cost me time was the panic, not the disconnect — and that's specifically the muscle memory the seven MCQ associates never once made me build, because there was never a live machine on the other end of any of them to worry about losing."

What's true today — and what only the official page can tell you

☺ Like you're 10: The numbers below are generally accurate right now, but this site isn't the Linux Foundation — always check the real page before you pay for anything.

This course is an independent, unofficial study resource and is not affiliated with the CNCF or the Linux Foundation. Format and rough duration are stable enough to plan around; price, exact task or question counts, and retake terms move more often and are deliberately not repeated here as fixed numbers where this course's own certification pages don't commit to one either.

ExamFormatDurationDocumentationPass mark
CGOAKnowledge-based (MCQ)90 minNone — closed-book75%
CAPAKnowledge-based (MCQ)90 minNone — closed-book75%
CBAKnowledge-based (MCQ)90 minNone — closed-book75%
CCAKnowledge-based (MCQ)90 minNone — closed-book75%
KCAKnowledge-based (MCQ)90 minNone — closed-book75%
OTCAKnowledge-based (MCQ)90 minNone — closed-book75%
PCAKnowledge-based (MCQ)90 minNone — closed-book75%
ICAHybrid (hands-on + MCQ)~2 hoursNot published — verify in the handbookNot published
LFCSPerformance-based2 hoursMan pages + distro docs, in-terminal only67%

One free retake has historically been bundled with each of the seven knowledge-based associates, inside a roughly twelve-month eligibility window; ICA and LFCS are the two exams on this shelf where this course's own pages decline to state a retake number, because the Linux Foundation hasn't published one consistently for either. Pass/fail results are typically emailed within a day or so of finishing — LFCS and ICA's hands-on half are graded after the fact against the machine's or environment's end state, so nothing appears on screen the moment you click finish.

⚠ Verify officially before you book

Proctoring provider, system requirements, ID policy, permitted desk items, break policy, documentation allowlist, price, retake terms, and results turnaround are all revised over time. Confirm current details on the official Linux Foundation training site and the CNCF certification pages before you register, and read the candidate handbook in your LF portal end to end — it is the only authority, and if anything here disagrees with it, it is right and this page is stale. If you're also working the five-exam Kubernetes core or the CNPA/CNPE pair toward the full sixteen-exam Golden Kubestronaut ladder, the same proctoring rules on this page apply to every one of those exams too.

🎬 Three doors, one hallway
🦊

Foxy: Three different rooms behind one front desk — that feels like it should be more complicated than it actually is.

🐢

Timmy: The gate doesn't care which room you're headed to, Foxy. Same ID check, same desk, same room scan, every single time, for all nine.

👺

Gizmo: So the desk rules are basically decoration for seven of the nine — no terminal, nothing to hide behind a second monitor for anyway. 😈

🐢

Timmy: The proctor doesn't grade your risk math, Gizmo. The desk gets scanned identically whether there's a keyboard behind it or not.

🦥

Sol: On my side of the hallway... there's no review screen to bail you out... just a live machine... and the timer never waits for anyone.

🐰

Remy: And on my side, never leave a question blank! A guess after eliminating two options beats a guaranteed zero, every single time.

🦊

Foxy: Okay, but ICA — which room is that actually in?

🐢

Timmy: Both, at once. Hands-on tasks and multiple-choice questions, same sitting. Prepare for the version with a live terminal in it, not the version that's merely badged like its seven closed-book neighbors.

None of this is the hard part — the hard part is Argo, Cilium, Kyverno, Prometheus, Istio, and the rest, and this page is the cheapest hour you'll spend protecting your preparation for any of them. Work through the readiness checklist, follow the pacing in how to study for a multi-exam marathon, drill recall with flashcards and the self-check quiz, read Field Notes for the format traps that actually catch people, and confirm every volatile number on each exam's own official page before you book.

🐢 Timmy's checkpoint

1. What's identical about check-in regardless of which of the three formats you're sitting? 2. Name the three formats this course's nine exams split into, and how many exams fall in each. 3. What is the documentation policy for the seven knowledge-based associates, for LFCS, and for ICA's hands-on half — and why does ICA get a different kind of answer than the other two? 4. What is the published pass mark for the seven MCQ associates, and where does that number actually come from? 5. Your connection drops mid-LFCS — what happens to your work, and what happens to the clock? 6. Should you ever leave a knowledge-based question blank? 7. Name one habit that LFCS and ICA's hands-on half both require that none of the seven MCQ associates need at all.

Check your answers
  1. The system check, the ID rule (government-issued, photo and signature, matching your profile exactly), the private room and cleared desk, and the check-in queue — all essentially identical whether the room behind the door turns out to be a quiz, a hybrid sitting, or a live terminal.
  2. Knowledge-based: seven — CGOA, CAPA, CBA, CCA, KCA, OTCA, PCA. Hybrid: one — ICA. Performance-based: one — LFCS.
  3. The seven MCQ associates are fully closed-book — no documentation of any kind, because there's no terminal for an allowance to apply to. LFCS treats the terminal as its own documentation — man pages and whatever ships with the distribution, nothing from a browser. ICA is the one exam where this course's own blueprint page declines to state an answer, because the Linux Foundation has never published a documentation policy for its hands-on half — confirm it yourself in the current candidate handbook.
  4. 75%, and it isn't restated on any individual cert's own page — it comes from the Linux Foundation's general Multiple Choice Exam FAQ, which applies to every LF multiple-choice exam, all seven of these included.
  5. The machine's state persists — it lives on the exam provider's infrastructure, not your laptop — but the timer keeps running. Reconnect immediately from the same portal link and expect possible re-verification.
  6. No. Nothing published indicates a penalty for a wrong answer, so an educated guess always beats a guaranteed-zero blank — flag it and move if you're unsure, then use the review screen.
  7. Confirming exactly which host, context, or target a task applies to before touching anything — solving a task perfectly against the wrong machine or environment scores zero on either exam, a trap the seven multiple-choice associates simply have no equivalent of.