CNCF Certified Kubernetes Administrator
265 practice questions
Last reviewed: April 2026
Written from scratch against the official Kubernetes exam guide
The Certified Kubernetes Administrator (CKA) is the flagship hands-on credential for Kubernetes operators and is one of the most-cited certifications in DevOps, SRE, and platform-engineering job postings. Unlike the multiple-choice KCNA / KCSA / CNPA exams, CKA puts you in front of real clusters via kubectl and a browser-based terminal, with two hours to solve practical tasks: bootstrapping clusters, configuring networking, managing workloads, troubleshooting failed nodes. CKA distinguishes the cluster-administrator role from CKAD (application developer focus), CKS (security specialist, requires active CKA), and CNPE (platform engineer focus). It is the central cert in the Kubestronaut bundle (KCNA + KCSA + CKA + CKAD + CKS) and the de facto gatekeeper for senior Kubernetes operations roles.
kubeadm cluster bootstrap, control-plane components, RBAC, etcd backup and restore, cluster upgrades. 25% of the exam - high-stakes tasks where a wrong move can break the cluster you need for the next question.
Services (ClusterIP, NodePort, LoadBalancer), Ingress, NetworkPolicies, CoreDNS, and CNI plugin awareness. 20% of the exam. Expect tasks that require understanding of how kube-proxy and DNS interact.
Deployments, DaemonSets, StatefulSets, ConfigMaps, Secrets, resource limits, taints and tolerations, node affinity. 15% of the exam.
PersistentVolumes, PersistentVolumeClaims, StorageClasses, dynamic provisioning, and volume modes. Smallest domain at 10% but expect at least one multi-step task.
The largest domain at 30%. Failed nodes, broken kubelets, misconfigured RBAC, unreachable services, crash-looping pods. Heavy use of `kubectl describe`, `kubectl logs`, `journalctl`, and `crictl`. Time pressure is brutal here.
$115k-$160k-$230k USD annual
Range reflects US-based mid-to-senior Kubernetes operator roles. SRE / platform roles at FAANG and unicorns trend significantly higher (often $280k-$400k+ TC for senior / staff levels). Kubernetes and SRE roles trend among the highest-paying in cloud - CKA is the credential most frequently cited as a baseline expectation for these salaries.
Source: levels.fyi 2025-2026 (SRE / platform / infrastructure roles), U.S. BLS OEWS May 2024 (15-1244 network / systems administrators, 15-1252 software developers). Figures are approximate; actual compensation depends on role, region, and experience.
Kubernetes is the de facto orchestrator for cloud-native workloads, and CKA is consistently cited as one of the most-requested certifications in DevOps, SRE, and platform-engineering job postings. Industry surveys from 2024-2026 (Stack Overflow Developer Survey, CNCF Annual Survey, Linux Foundation Open Source Jobs Report) place Kubernetes administration skills at the top of cloud-infrastructure hiring priorities, with CKA frequently named as a "preferred" or "required" credential in senior pipelines. The Kubestronaut bundle (KCNA + KCSA + CKA + CKAD + CKS) is a meaningful flex in the CNCF community and signals an unusually deep operational commitment. CKA alone, paired with production experience, is one of the strongest single-cert salary multipliers in cloud.
There are no formal prerequisites for CKA, but the exam is genuinely demanding and assumes solid Linux command-line fluency, Docker / container literacy, and YAML comfort. CNCF recommends prior KCNA-level conceptual knowledge - and most candidates who skip that step underestimate the volume of background context the exam assumes.
The sensible CNCF progression is KCNA → CKA → (CKAD and / or CKS). KCSA before CKA is also reasonable for security-focused careers. CKA does not require any prior cert, but it is the hard prerequisite for CKS - you cannot register for CKS without an active CKA. If your goal is the Kubestronaut bundle, sit KCNA + KCSA first (cheap, multiple-choice), then CKA, then CKAD, and finish with CKS once your CKA is active.
CKA is notoriously demanding. The exam is hands-on: 15-20 performance-based tasks against real clusters in a browser-based terminal, two hours, with access only to the official Kubernetes documentation in a single browser tab. Pass mark is 66%. Expect 80-150 hours of study over 8-14 weeks if you have prior Linux and Docker fluency; 150+ hours if you are coming from a Windows / non-Linux background.
The most common stumbling block is time management - many candidates know how to solve every task but cannot solve them quickly enough. kubectl efficiency (aliases, `--dry-run=client -o yaml` workflows, fast vim editing) and bash / jq fluency separate passers from failers. The second-largest stumbling block is troubleshooting under pressure: when a task asks you to fix a broken node, you have minutes, not hours. Mock exams from killer.sh (two free attempts bundled with registration) are widely considered required preparation.
Validity period reduced from 3 years to 2 years effective April 1, 2024 (applies to all CKA / CKAD certifications issued on or after that date). Curriculum tracks recent Kubernetes releases; minor task updates each year.
Original release - the founding CNCF / Linux Foundation Kubernetes credential. Validity was 3 years until the April 2024 change.
It's the CNCF's professional-level certification for Kubernetes administrators - installing and configuring clusters, managing workloads, networking, storage, and troubleshooting. Crucially, it's a hands-on, performance-based exam: you solve real tasks in a live terminal, not multiple-choice questions. See the CKA hub for the full scope.
It's genuinely challenging because it's practical and timed - around 2 hours to complete a set of hands-on tasks on real clusters, so you need fluent kubectl and real troubleshooting ability, not memorization. Speed matters as much as knowledge. The best preparation is repeated hands-on practice; our CKA practice questions and Playbook reinforce the command patterns and troubleshooting flow the exam demands.
Both, in a specific way: the entire exam is hands-on in a live terminal, and during it you're allowed to open one browser tab to the official Kubernetes documentation (kubernetes.io) - and nothing else. So it's "open book" only to the official docs; there's no access to Google, notes, or other sites. Knowing your way around the docs quickly is part of the skill.
Yes - CKA is one of the most respected, in-demand certifications in cloud-native, precisely because it proves you can actually operate Kubernetes, not just describe it. Kubernetes administration is a well-paid specialization (pay varies by region and seniority), and CKA frequently appears in job requirements. See how it ranks on our State of Certifications report.
Get deeply hands-on with kubectl on real clusters - deployments, services, networking, storage, RBAC, and especially troubleshooting - and practice under a timer, since pacing is half the battle. Learn to navigate the official docs fast. Our CKA question bank and Playbook target exactly those hands-on skills and the exam's time pressure.
Yes - it's valid for 2 years. You recertify by retaking the current exam before it expires. The exam tracks recent Kubernetes versions, so a retake also keeps your skills current with the latest releases.
Around $445 USD - more than most multiple-choice exams because it's performance-based: it runs live clusters, live proctoring, and includes one free retake. That infrastructure (and the retake safety net) is what you're paying for. Scheduling and system requirements are on our Kubernetes exam info page.
Yes - you can reschedule through the exam provider (PSI), generally up to 24 hours before your appointment, without losing the attempt. Our Kubernetes exam info page covers the scheduling and reschedule process and the workspace requirements for the remote exam.
They run Kubernetes clusters in production - provisioning and upgrading clusters, deploying and scaling workloads, managing networking, storage, and access, monitoring health, and troubleshooting when things break. CKA validates exactly this operational skill set, which is why it's a hands-on rather than a written exam.
CKA (CNCF Certified Kubernetes Administrator) is a a challenging, scenario-heavy exam that requires deep hands-on experience and the ability to make architectural trade-off decisions Professional-level exam. Most candidates need 150-300 hours of study spread over 3-6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Most candidates who score consistently above the passing threshold on practice exams pass on their first attempt.
Most candidates need 150-300 hours of study spread over 3-6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Time-to-pass varies widely by prior experience. Engineers with hands-on production experience in the underlying technology typically need less; candidates new to the platform should plan toward the upper end of that range.
Yes - for cloud engineers, architects, and consultants who work with Kubernetes, CKA is generally worth it. It is a recognized credential that signals validated knowledge to employers, recruiters, and clients; whether the time and fee pay off for you depends on your role and goals.
The passing score for CKA is 66%. The exam contains 60 questions and lasts 2 hr.
The CKA exam fee is $445 USD. Fees are set by Kubernetes and may vary by region; always confirm the current price on the official Kubernetes certification page before booking.
CNCF / Kubernetes certifications are valid for 2 years. Renew by re-passing the current version of the exam; renewal extends validity another 2 years from the new pass date.
Yes, Kubernetes certifications are delivered online only - there are no in-person test centers. The exam runs in a secure proctored browser; you'll need a quiet private room, webcam, microphone, stable broadband, and a government photo ID.
The CKA exam-simulation mode on CertLabPro mirrors the real exam: 60 questions in 2 hr, with the same 66% passing threshold. You also get 15 study modes in total, and Browse mode renders every question with its answer and explanation statically.
$115k-$230k USD is the typical US salary range for roles that value CKA, per levels.fyi 2025-2026 (SRE / platform / infrastructure roles), U.S. BLS OEWS May 2024 (15-1244 network / systems administrators, 15-1252 software developers). Actual pay depends on seniority, location, and role - senior and architect positions trend higher, entry-level lower.
It is ambitious - a month is tight for CKA, and most candidates need longer. Most candidates need 150-300 hours of study spread over 3-6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. If the Kubernetes platform is new to you, give yourself more time; with hands-on experience you may need less.
Yes - CKA expects real-world, hands-on experience and is an advanced exam, so it is not recommended as a first certification.