ExamFinch.com My Study

Study guide

1.1 About the KCNA Exam & Certification Path

Practice this exam

Kubernetes and Cloud Native Associate KCNA

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: Introduction & Exam Overview

1.1 About the KCNA Exam & Certification Path 1.2 How to Use This Study Guide

2 Chapter 2: Kubernetes Fundamentals - Cluster Architecture & the API

2.1 Kubernetes Architecture & Control Plane Components 2.2 Worker Node Architecture & Node Components 2.3 Kubernetes API, Declarative Management & kubectl 2.4 Kubernetes Releases, API Versioning & Deprecation Policy

3 Chapter 3: Kubernetes Fundamentals - Workloads & Configuration

3.1 Core Workload Objects (Pods, Deployments & ReplicaSets) 3.2 Advanced Controllers (StatefulSets, DaemonSets, Jobs & CronJobs) 3.3 Namespaces, Labels, Selectors & Annotations 3.4 ConfigMaps, Secrets & Application Configuration 3.5 Pod & Container Lifecycle, Restart Policies & Graceful Termination

4 Chapter 4: Kubernetes Fundamentals - Scheduling & Autoscaling

4.1 Scheduling, Resource Management & Node Selection 4.2 Advanced Scheduling: Affinity, Topology Spread, Priority & Disruption Budgets 4.3 Autoscaling Workloads & Clusters (HPA, VPA, Cluster Autoscaler, KEDA)

5 Chapter 5: Kubernetes Fundamentals - Cluster Administration & Extensibility

5.1 Kubernetes Distributions, Installation Tools & Managed Services 5.2 Cluster Administration: Node Maintenance, Upgrades & etcd Backup 5.3 Extending Kubernetes: CRDs, Operators & the Controller Pattern

6 Chapter 6: Kubernetes Fundamentals - Containerization

6.1 Container Fundamentals, Runtimes & Registries 6.2 Container Image Anatomy: Layers, Tags, Digests & Pull Policy

7 Chapter 7: Container Orchestration - Networking & Service Discovery

7.1 Kubernetes Networking, Services & Ingress 7.2 Cluster DNS & Service Discovery with CoreDNS 7.3 NetworkPolicies, Zero-Trust Segmentation & the Gateway API

8 Chapter 8: Container Orchestration - Storage

8.1 Storage Concepts (PVs, PVCs, StorageClasses & CSI) 8.2 Volume Types, Snapshots & Stateful Storage Operations

9 Chapter 9: Container Orchestration - Security

9.1 Kubernetes Security & Access Control (RBAC & ServiceAccounts) 9.2 The 4C's of Cloud Native Security & Supply-Chain Trust 9.3 Service Mesh, mTLS & Zero-Trust Service Identity

10 Chapter 10: Container Orchestration - Troubleshooting

10.1 Container Troubleshooting & Health Probes 10.2 Cluster & Node-Level Troubleshooting

11 Chapter 11: Cloud Native Application Delivery

11.1 Cloud Native CI/CD Pipelines & Build Tooling 11.2 GitOps & Package Management (Helm, Kustomize, Argo CD & Flux) 11.3 Deployment Strategies & Release Management 11.4 Progressive Delivery Automation: Argo Rollouts, Flagger & Feature Flags 11.5 Application Debugging & Developer Workflows in Kubernetes 11.6 Platform Engineering & Developer Self-Service

12 Chapter 12: Cloud Native Architecture - Observability & Principles

12.1 Cloud Native Observability (Logging, Metrics & Tracing) 12.2 Cloud Native Principles & Architecture Patterns 12.3 Serverless, FaaS & Event-Driven Architecture

13 Chapter 13: Cloud Native Architecture - CNCF Ecosystem & Community

13.1 The CNCF Landscape, Governance & Project Lifecycle 13.2 Cloud Native Community, Collaboration & Contribution

1.1 About the KCNA Exam & Certification Path

Key Takeaways Explain This Topic AI

The KCNA exam consists of 60 multiple-choice questions administered in 90 minutes with a 75% passing score.

The registration fee is $250 USD, which includes one free retake, with exam vouchers valid for 12 months from purchase.

Domain weightings are Kubernetes Fundamentals (44%), Container Orchestration (28%), Cloud Native Application Delivery (16%), and Cloud Native Architecture (12%).

KCNA serves as the entry-level associate certification in the CNCF career pathway, leading into hands-on performance exams (CKA, CKAD, CKS).

The exam is delivered online via PSI Bridge proctoring, requiring strict environment, hardware, and identification standards.

Last updated: August 2026

1.1 About the KCNA Exam & Certification Path

Quick Answer: The Kubernetes and Cloud Native Associate (KCNA) exam is a 60-question, 90-minute online multiple-choice exam administered jointly by The Linux Foundation and the Cloud Native Computing Foundation (CNCF). It costs $250 USD, requires a 75% passing score, and includes one free retake. The KCNA validates baseline conceptual knowledge across Kubernetes architecture, container orchestration, application delivery, and cloud-native principles, serving as the ideal entry point before pursuing hands-on performance certifications like CKA, CKAD, or CKS.

The Kubernetes and Cloud Native Associate (KCNA) certification was established by the Cloud Native Computing Foundation (CNCF) in partnership with The Linux Foundation to establish a standardized, vendor-neutral credential for foundational cloud-native knowledge. As cloud-native technologies become the standard for modern infrastructure, the demand for professionals who understand containerization, microservices, and Kubernetes has expanded beyond traditional cluster administrators.

Unlike intermediate and advanced CNCF certifications—such as the Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), or Certified Kubernetes Security Specialist (CKS)—the KCNA is a multiple-choice, conceptual examination rather than a command-line performance-based lab exam. This structural design makes the KCNA accessible to software developers, system administrators, DevOps engineers, site reliability engineers (SREs), enterprise architects, technical project managers, product managers, and IT leadership seeking verifiable competency in cloud-native fundamentals.

Exam Administrative Quick Facts

The table below summarizes the core administrative, technical, and financial parameters of the KCNA examination.

  • Exam Parameter Details & Requirements
  • Exam Name Kubernetes and Cloud Native Associate (KCNA)
  • Administering Bodies Cloud Native Computing Foundation (CNCF) & The Linux Foundation

Exam Format 60 multiple-choice questions (The Linux Foundation does not publish a per-question single-select vs multiple-select breakdown)

  • Time Limit 90 Minutes (1.5 Hours)
  • Passing Score 75% (Minimum score required to earn certification)
  • Registration Fee $250 USD (Includes 1 complimentary retake)
  • Voucher Validity 12 Months from purchase date
  • Delivery Method Online Remote Proctored via PSI Bridge Platform
  • Prerequisites None (Open to all candidates without prior requirements)
  • Certification Validity 2 Years from passing date
  • CNCF Exam Content Blueprint Breakdown

The KCNA exam blueprint is divided into four distinct domain areas. Each domain evaluates specific competencies within the cloud-native ecosystem, with Kubernetes Fundamentals representing nearly half of the total exam weight. +-----------------------------------------------------------------------+

  • | KCNA EXAM DOMAIN WEIGHT DISTRIBUTION |
  • +-----------------------------------------------------------------------+
  • | [========================================] Kubernetes Fundamentals | 44%
  • | [==========================] Container Orchestration | 28%
  • | [===============] Cloud Native Application Delivery | 16%
  • | [============] Cloud Native Architecture | 12%
  • +-----------------------------------------------------------------------+

Domain Weight (%) Est. Questions Official competencies (CNCF KCNA_Curriculum.pdf )

1. Kubernetes Fundamentals 44% ~26 Questions Kubernetes Core Concepts · Administration · Scheduling · Containerization

  • 2. Container Orchestration 28% ~17 Questions Networking · Security · Troubleshooting · Storage
  • 3. Cloud Native Application Delivery 16% ~10 Questions Application Delivery · Debugging

4. Cloud Native Architecture 12% ~7 Questions Observability · Cloud Native Ecosystem and Principles · Cloud Native Community and Collaboration

  • Read the mapping carefully — it is not the one most third-party guides print. The
  • official curriculum places Containerization (images, runtimes, OCI) under Kubernetes
  • Fundamentals , not under Application Delivery. It places Observability under Cloud

Native Architecture , not under Container Orchestration. And Networking and Storage belong to Container Orchestration , not to Kubernetes Fundamentals. Question counts are

estimates derived from the published weights; CNCF does not publish per-domain item counts.

  • Detailed Breakdown of Blueprint Domains
  • 1. Kubernetes Fundamentals (44%)
  • The largest domain, covering four competencies. Kubernetes Core Concepts is cluster
  • architecture and the object model: control plane components and their relationship to etcd,
  • worker node daemons, the API and declarative management, and the workload controllers
  • (Pods, Deployments, ReplicaSets, StatefulSets, DaemonSets, Jobs, CronJobs) together with

namespaces, labels, ConfigMaps, and Secrets. Administration is cluster lifecycle work:

  • distributions and installers, managed services, node maintenance, upgrades, backup, and
  • extending the API with CRDs and Operators. Scheduling is how the scheduler filters and

scores nodes, plus requests and limits, QoS classes, affinity, taints, and autoscaling. Containerization is containers themselves — kernel isolation, OCI standards, runtimes,

image layers, tags and digests, and registries.

  • 2. Container Orchestration (28%)
  • Four competencies covering how workloads actually run on a cluster. Networking is the

IP-per-Pod model, CNI plugins, Services, Ingress and the Gateway API, and cluster DNS. Security is authentication and authorization, RBAC, ServiceAccounts, admission control,

Pod Security Standards, the 4C's model, supply-chain trust, and service-mesh mTLS. Troubleshooting is health probes, container failure states, node conditions, eviction,

and events. Storage is volume types, PersistentVolumes and Claims, StorageClasses, CSI,

access modes, reclaim policies, and snapshots.

  • 3. Cloud Native Application Delivery (16%)
  • Application Delivery covers CI/CD pipelines and Kubernetes-native pipeline engines,
  • GitOps with Argo CD and Flux, packaging with Helm and Kustomize, release strategies
  • (rolling, recreate, blue/green, canary), progressive delivery automation, and the platform
  • engineering layer that packages all of it into self-service paths. Debugging covers
  • ephemeral debug containers, port-forwarding, copying files in and out of containers, and

the developer inner loop.

  • 4. Cloud Native Architecture (12%)
  • Observability — the three telemetry pillars, Prometheus, log aggregation, and

distributed tracing with OpenTelemetry — sits here rather than under orchestration. Cloud Native Ecosystem and Principles covers the CNCF definition, the Twelve-Factor App,

  • microservices, immutability, declarative APIs, service mesh, serverless and event-driven
  • architecture, and the CNCF landscape and project maturity lifecycle. Cloud Native Community
  • and Collaboration covers CNCF and Kubernetes governance, SIGs and TAGs, the contributor

ladder, the Code of Conduct and DCO, and community events.

CNCF Certification Pathway & Comparison

Understanding how the KCNA fits within the broader CNCF certification roadmap allows candidates to plan their professional development and credential sequence effectively.

Certification Level Exam Format Duration / Passing Score Target Role Prerequisites

KCNA (Cloud Native Associate) Foundational / Entry Multiple-Choice 90 min / 75% Developers, System Admins, DevOps, SREs, Managers None

CKA (Kubernetes Administrator) Intermediate Performance-Based Lab 120 min / 66% Cluster Administrators, Infrastructure Engineers None

CKAD (Application Developer) Intermediate Performance-Based Lab 120 min / 66% Cloud Developers, DevOps Engineers None

CKS (Kubernetes Security Specialist) Advanced Performance-Based Lab 120 min / 67% DevSecOps Engineers, Security Specialists Active CKA Required

Strategic Progression Roadmap

Step 1: KCNA (Foundational) — Master theoretical concepts across Kubernetes, application delivery pipelines, telemetry, and CNCF architecture principles.

Step 2: CKA or CKAD (Intermediate) — Transition from conceptual understanding to hands-on command-line proficiency using kubectl to configure, inspect, build, and troubleshoot live Kubernetes clusters.

Step 3: CKS (Advanced) — Specialize in cluster security, network policy enforcement, RBAC hardening, container image scanning, runtime threat detection, and vulnerability mitigation after obtaining the CKA.

PSI Bridge Proctoring & Exam Day Logistics

The KCNA exam is delivered globally via the PSI Bridge online proctoring platform. Adhering to strict testing guidelines ensures a smooth, uninterrupted exam experience.

System & Testing Environment Requirements

Testing Space: Candidates must test in a private, quiet room with a closed door, clean desk, clear walls, and no secondary monitors, smart devices, phones, or written notes within reach.

Hardware & Network: A computer running Windows, macOS, or Linux equipped with a functional webcam, microphone, reliable high-speed internet connection, and the PSI Secure Browser application.

Identification: A valid, unexpired, government-issued photo ID (such as a passport or driver's license) displaying the exact legal name registered on The Linux Foundation candidate profile.

Scheduling, Retake Policy, and Results

12-Month Window: Exam vouchers remain active for 12 months from purchase. Both your initial attempt and any retake must be completed within this period.

Free Retake: Every registration includes one complimentary retake if you do not achieve the 75% passing mark on your first attempt.

Score Reporting: Official score reports detailing your overall percentage and domain breakdown are sent via email by The Linux Foundation within 24 hours of exam submission.

Official CNCF & Linux Foundation Resources

To complement this study guide, consult the following authoritative official references:

Linux Foundation KCNA Certification Portal — Official exam overview, policies, pricing, and registration portal.

CNCF Curriculum GitHub Repository — The official open-source repository outlining current KCNA exam domain competencies and topics.

Linux Foundation Candidate Handbook — Comprehensive administrative handbook detailing registration rules, environment requirements, and retake policies.

CNCF Interactive Landscape — The definitive interactive catalog detailing all CNCF graduated, incubating, and sandbox cloud-native projects.