1.1 About the KCNA Exam & Certification Path
Key Takeaways
- The KCNA exam consists of 60 multiple-choice questions administered in 90 minutes with a 75% passing score.
- The registration fee is $250 USD, which includes one free retake, with exam vouchers valid for 12 months from purchase.
- Domain weightings are Kubernetes Fundamentals (44%), Container Orchestration (28%), Cloud Native Application Delivery (16%), and Cloud Native Architecture (12%).
- KCNA serves as the entry-level associate certification in the CNCF career pathway, leading into hands-on performance exams (CKA, CKAD, CKS).
- The exam is delivered online via PSI Bridge proctoring, requiring strict environment, hardware, and identification standards.
1.1 About the KCNA Exam & Certification Path
Quick Answer: The Kubernetes and Cloud Native Associate (KCNA) exam is a 60-question, 90-minute online multiple-choice exam administered jointly by The Linux Foundation and the Cloud Native Computing Foundation (CNCF). It costs $250 USD, requires a 75% passing score, and includes one free retake. The KCNA validates baseline conceptual knowledge across Kubernetes architecture, container orchestration, application delivery, and cloud-native principles, serving as the ideal entry point before pursuing hands-on performance certifications like CKA, CKAD, or CKS.
The Kubernetes and Cloud Native Associate (KCNA) certification was established by the Cloud Native Computing Foundation (CNCF) in partnership with The Linux Foundation to establish a standardized, vendor-neutral credential for foundational cloud-native knowledge. As cloud-native technologies become the standard for modern infrastructure, the demand for professionals who understand containerization, microservices, and Kubernetes has expanded beyond traditional cluster administrators.
Unlike intermediate and advanced CNCF certifications—such as the Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), or Certified Kubernetes Security Specialist (CKS)—the KCNA is a multiple-choice, conceptual examination rather than a command-line performance-based lab exam. This structural design makes the KCNA accessible to software developers, system administrators, DevOps engineers, site reliability engineers (SREs), enterprise architects, technical project managers, product managers, and IT leadership seeking verifiable competency in cloud-native fundamentals.
Exam Administrative Quick Facts
The table below summarizes the core administrative, technical, and financial parameters of the KCNA examination.
| Exam Parameter | Details & Requirements |
|---|---|
| Exam Name | Kubernetes and Cloud Native Associate (KCNA) |
| Administering Bodies | Cloud Native Computing Foundation (CNCF) & The Linux Foundation |
| Exam Format | 60 multiple-choice questions (The Linux Foundation does not publish a per-question single-select vs multiple-select breakdown) |
| Time Limit | 90 Minutes (1.5 Hours) |
| Passing Score | 75% (Minimum score required to earn certification) |
| Registration Fee | $250 USD (Includes 1 complimentary retake) |
| Voucher Validity | 12 Months from purchase date |
| Delivery Method | Online Remote Proctored via PSI Bridge Platform |
| Prerequisites | None (Open to all candidates without prior requirements) |
| Certification Validity | 2 Years from passing date |
CNCF Exam Content Blueprint Breakdown
The KCNA exam blueprint is divided into four distinct domain areas. Each domain evaluates specific competencies within the cloud-native ecosystem, with Kubernetes Fundamentals representing nearly half of the total exam weight.
+-----------------------------------------------------------------------+
| KCNA EXAM DOMAIN WEIGHT DISTRIBUTION |
+-----------------------------------------------------------------------+
| [========================================] Kubernetes Fundamentals | 44%
| [==========================] Container Orchestration | 28%
| [===============] Cloud Native Application Delivery | 16%
| [============] Cloud Native Architecture | 12%
+-----------------------------------------------------------------------+
| Domain | Weight (%) | Est. Questions | Official competencies (CNCF KCNA_Curriculum.pdf) |
|---|---|---|---|
| 1. Kubernetes Fundamentals | 44% | ~26 Questions | Kubernetes Core Concepts · Administration · Scheduling · Containerization |
| 2. Container Orchestration | 28% | ~17 Questions | Networking · Security · Troubleshooting · Storage |
| 3. Cloud Native Application Delivery | 16% | ~10 Questions | Application Delivery · Debugging |
| 4. Cloud Native Architecture | 12% | ~7 Questions | Observability · Cloud Native Ecosystem and Principles · Cloud Native Community and Collaboration |
Read the mapping carefully — it is not the one most third-party guides print. The official curriculum places Containerization (images, runtimes, OCI) under Kubernetes Fundamentals, not under Application Delivery. It places Observability under Cloud Native Architecture, not under Container Orchestration. And Networking and Storage belong to Container Orchestration, not to Kubernetes Fundamentals. Question counts are estimates derived from the published weights; CNCF does not publish per-domain item counts.
Detailed Breakdown of Blueprint Domains
1. Kubernetes Fundamentals (44%)
The largest domain, covering four competencies. Kubernetes Core Concepts is cluster architecture and the object model: control plane components and their relationship to etcd, worker node daemons, the API and declarative management, and the workload controllers (Pods, Deployments, ReplicaSets, StatefulSets, DaemonSets, Jobs, CronJobs) together with namespaces, labels, ConfigMaps, and Secrets. Administration is cluster lifecycle work: distributions and installers, managed services, node maintenance, upgrades, backup, and extending the API with CRDs and Operators. Scheduling is how the scheduler filters and scores nodes, plus requests and limits, QoS classes, affinity, taints, and autoscaling. Containerization is containers themselves — kernel isolation, OCI standards, runtimes, image layers, tags and digests, and registries.
2. Container Orchestration (28%)
Four competencies covering how workloads actually run on a cluster. Networking is the IP-per-Pod model, CNI plugins, Services, Ingress and the Gateway API, and cluster DNS. Security is authentication and authorization, RBAC, ServiceAccounts, admission control, Pod Security Standards, the 4C's model, supply-chain trust, and service-mesh mTLS. Troubleshooting is health probes, container failure states, node conditions, eviction, and events. Storage is volume types, PersistentVolumes and Claims, StorageClasses, CSI, access modes, reclaim policies, and snapshots.
3. Cloud Native Application Delivery (16%)
Application Delivery covers CI/CD pipelines and Kubernetes-native pipeline engines, GitOps with Argo CD and Flux, packaging with Helm and Kustomize, release strategies (rolling, recreate, blue/green, canary), progressive delivery automation, and the platform engineering layer that packages all of it into self-service paths. Debugging covers ephemeral debug containers, port-forwarding, copying files in and out of containers, and the developer inner loop.
4. Cloud Native Architecture (12%)
Observability — the three telemetry pillars, Prometheus, log aggregation, and distributed tracing with OpenTelemetry — sits here rather than under orchestration. Cloud Native Ecosystem and Principles covers the CNCF definition, the Twelve-Factor App, microservices, immutability, declarative APIs, service mesh, serverless and event-driven architecture, and the CNCF landscape and project maturity lifecycle. Cloud Native Community and Collaboration covers CNCF and Kubernetes governance, SIGs and TAGs, the contributor ladder, the Code of Conduct and DCO, and community events.
CNCF Certification Pathway & Comparison
Understanding how the KCNA fits within the broader CNCF certification roadmap allows candidates to plan their professional development and credential sequence effectively.
| Certification | Level | Exam Format | Duration / Passing Score | Target Role | Prerequisites |
|---|---|---|---|---|---|
| KCNA (Cloud Native Associate) | Foundational / Entry | Multiple-Choice | 90 min / 75% | Developers, System Admins, DevOps, SREs, Managers | None |
| CKA (Kubernetes Administrator) | Intermediate | Performance-Based Lab | 120 min / 66% | Cluster Administrators, Infrastructure Engineers | None |
| CKAD (Application Developer) | Intermediate | Performance-Based Lab | 120 min / 66% | Cloud Developers, DevOps Engineers | None |
| CKS (Kubernetes Security Specialist) | Advanced | Performance-Based Lab | 120 min / 67% | DevSecOps Engineers, Security Specialists | Active CKA Required |
Strategic Progression Roadmap
- Step 1: KCNA (Foundational) — Master theoretical concepts across Kubernetes, application delivery pipelines, telemetry, and CNCF architecture principles.
- Step 2: CKA or CKAD (Intermediate) — Transition from conceptual understanding to hands-on command-line proficiency using
kubectlto configure, inspect, build, and troubleshoot live Kubernetes clusters. - Step 3: CKS (Advanced) — Specialize in cluster security, network policy enforcement, RBAC hardening, container image scanning, runtime threat detection, and vulnerability mitigation after obtaining the CKA.
PSI Bridge Proctoring & Exam Day Logistics
The KCNA exam is delivered globally via the PSI Bridge online proctoring platform. Adhering to strict testing guidelines ensures a smooth, uninterrupted exam experience.
System & Testing Environment Requirements
- Testing Space: Candidates must test in a private, quiet room with a closed door, clean desk, clear walls, and no secondary monitors, smart devices, phones, or written notes within reach.
- Hardware & Network: A computer running Windows, macOS, or Linux equipped with a functional webcam, microphone, reliable high-speed internet connection, and the PSI Secure Browser application.
- Identification: A valid, unexpired, government-issued photo ID (such as a passport or driver's license) displaying the exact legal name registered on The Linux Foundation candidate profile.
Scheduling, Retake Policy, and Results
- 12-Month Window: Exam vouchers remain active for 12 months from purchase. Both your initial attempt and any retake must be completed within this period.
- Free Retake: Every registration includes one complimentary retake if you do not achieve the 75% passing mark on your first attempt.
- Score Reporting: Official score reports detailing your overall percentage and domain breakdown are sent via email by The Linux Foundation within 24 hours of exam submission.
Official CNCF & Linux Foundation Resources
To complement this study guide, consult the following authoritative official references:
- Linux Foundation KCNA Certification Portal — Official exam overview, policies, pricing, and registration portal.
- CNCF Curriculum GitHub Repository — The official open-source repository outlining current KCNA exam domain competencies and topics.
- Linux Foundation Candidate Handbook — Comprehensive administrative handbook detailing registration rules, environment requirements, and retake policies.
- CNCF Interactive Landscape — The definitive interactive catalog detailing all CNCF graduated, incubating, and sandbox cloud-native projects.
What is the passing score, question count, and time limit for the Kubernetes and Cloud Native Associate (KCNA) exam?
Which CNCF blueprint domain carries the largest weight on the KCNA exam, and what percentage does it account for?
Which of the following statements accurately describes the CNCF certification progression roadmap?