1.1 About the KCNA Exam & Certification Path

Key Takeaways

  • The KCNA exam consists of 60 multiple-choice questions administered in 90 minutes with a 75% passing score.
  • The registration fee is $250 USD, which includes one free retake, with exam vouchers valid for 12 months from purchase.
  • Domain weightings are Kubernetes Fundamentals (44%), Container Orchestration (28%), Cloud Native Application Delivery (16%), and Cloud Native Architecture (12%).
  • KCNA serves as the entry-level associate certification in the CNCF career pathway, leading into hands-on performance exams (CKA, CKAD, CKS).
  • The exam is delivered online via PSI Bridge proctoring, requiring strict environment, hardware, and identification standards.
Last updated: August 2026

1.1 About the KCNA Exam & Certification Path

Quick Answer: The Kubernetes and Cloud Native Associate (KCNA) exam is a 60-question, 90-minute online multiple-choice exam administered jointly by The Linux Foundation and the Cloud Native Computing Foundation (CNCF). It costs $250 USD, requires a 75% passing score, and includes one free retake. The KCNA validates baseline conceptual knowledge across Kubernetes architecture, container orchestration, application delivery, and cloud-native principles, serving as the ideal entry point before pursuing hands-on performance certifications like CKA, CKAD, or CKS.

The Kubernetes and Cloud Native Associate (KCNA) certification was established by the Cloud Native Computing Foundation (CNCF) in partnership with The Linux Foundation to establish a standardized, vendor-neutral credential for foundational cloud-native knowledge. As cloud-native technologies become the standard for modern infrastructure, the demand for professionals who understand containerization, microservices, and Kubernetes has expanded beyond traditional cluster administrators.

Unlike intermediate and advanced CNCF certifications—such as the Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), or Certified Kubernetes Security Specialist (CKS)—the KCNA is a multiple-choice, conceptual examination rather than a command-line performance-based lab exam. This structural design makes the KCNA accessible to software developers, system administrators, DevOps engineers, site reliability engineers (SREs), enterprise architects, technical project managers, product managers, and IT leadership seeking verifiable competency in cloud-native fundamentals.


Exam Administrative Quick Facts

The table below summarizes the core administrative, technical, and financial parameters of the KCNA examination.

Exam ParameterDetails & Requirements
Exam NameKubernetes and Cloud Native Associate (KCNA)
Administering BodiesCloud Native Computing Foundation (CNCF) & The Linux Foundation
Exam Format60 multiple-choice questions (The Linux Foundation does not publish a per-question single-select vs multiple-select breakdown)
Time Limit90 Minutes (1.5 Hours)
Passing Score75% (Minimum score required to earn certification)
Registration Fee$250 USD (Includes 1 complimentary retake)
Voucher Validity12 Months from purchase date
Delivery MethodOnline Remote Proctored via PSI Bridge Platform
PrerequisitesNone (Open to all candidates without prior requirements)
Certification Validity2 Years from passing date

CNCF Exam Content Blueprint Breakdown

The KCNA exam blueprint is divided into four distinct domain areas. Each domain evaluates specific competencies within the cloud-native ecosystem, with Kubernetes Fundamentals representing nearly half of the total exam weight.

+-----------------------------------------------------------------------+
|                    KCNA EXAM DOMAIN WEIGHT DISTRIBUTION               |
+-----------------------------------------------------------------------+
|  [========================================] Kubernetes Fundamentals   |  44%
|  [==========================] Container Orchestration                 |  28%
|  [===============] Cloud Native Application Delivery                 |  16%
|  [============] Cloud Native Architecture                             |  12%
+-----------------------------------------------------------------------+
DomainWeight (%)Est. QuestionsOfficial competencies (CNCF KCNA_Curriculum.pdf)
1. Kubernetes Fundamentals44%~26 QuestionsKubernetes Core Concepts · Administration · Scheduling · Containerization
2. Container Orchestration28%~17 QuestionsNetworking · Security · Troubleshooting · Storage
3. Cloud Native Application Delivery16%~10 QuestionsApplication Delivery · Debugging
4. Cloud Native Architecture12%~7 QuestionsObservability · Cloud Native Ecosystem and Principles · Cloud Native Community and Collaboration

Read the mapping carefully — it is not the one most third-party guides print. The official curriculum places Containerization (images, runtimes, OCI) under Kubernetes Fundamentals, not under Application Delivery. It places Observability under Cloud Native Architecture, not under Container Orchestration. And Networking and Storage belong to Container Orchestration, not to Kubernetes Fundamentals. Question counts are estimates derived from the published weights; CNCF does not publish per-domain item counts.


Detailed Breakdown of Blueprint Domains

1. Kubernetes Fundamentals (44%)

The largest domain, covering four competencies. Kubernetes Core Concepts is cluster architecture and the object model: control plane components and their relationship to etcd, worker node daemons, the API and declarative management, and the workload controllers (Pods, Deployments, ReplicaSets, StatefulSets, DaemonSets, Jobs, CronJobs) together with namespaces, labels, ConfigMaps, and Secrets. Administration is cluster lifecycle work: distributions and installers, managed services, node maintenance, upgrades, backup, and extending the API with CRDs and Operators. Scheduling is how the scheduler filters and scores nodes, plus requests and limits, QoS classes, affinity, taints, and autoscaling. Containerization is containers themselves — kernel isolation, OCI standards, runtimes, image layers, tags and digests, and registries.

2. Container Orchestration (28%)

Four competencies covering how workloads actually run on a cluster. Networking is the IP-per-Pod model, CNI plugins, Services, Ingress and the Gateway API, and cluster DNS. Security is authentication and authorization, RBAC, ServiceAccounts, admission control, Pod Security Standards, the 4C's model, supply-chain trust, and service-mesh mTLS. Troubleshooting is health probes, container failure states, node conditions, eviction, and events. Storage is volume types, PersistentVolumes and Claims, StorageClasses, CSI, access modes, reclaim policies, and snapshots.

3. Cloud Native Application Delivery (16%)

Application Delivery covers CI/CD pipelines and Kubernetes-native pipeline engines, GitOps with Argo CD and Flux, packaging with Helm and Kustomize, release strategies (rolling, recreate, blue/green, canary), progressive delivery automation, and the platform engineering layer that packages all of it into self-service paths. Debugging covers ephemeral debug containers, port-forwarding, copying files in and out of containers, and the developer inner loop.

4. Cloud Native Architecture (12%)

Observability — the three telemetry pillars, Prometheus, log aggregation, and distributed tracing with OpenTelemetry — sits here rather than under orchestration. Cloud Native Ecosystem and Principles covers the CNCF definition, the Twelve-Factor App, microservices, immutability, declarative APIs, service mesh, serverless and event-driven architecture, and the CNCF landscape and project maturity lifecycle. Cloud Native Community and Collaboration covers CNCF and Kubernetes governance, SIGs and TAGs, the contributor ladder, the Code of Conduct and DCO, and community events.


CNCF Certification Pathway & Comparison

Understanding how the KCNA fits within the broader CNCF certification roadmap allows candidates to plan their professional development and credential sequence effectively.

CertificationLevelExam FormatDuration / Passing ScoreTarget RolePrerequisites
KCNA (Cloud Native Associate)Foundational / EntryMultiple-Choice90 min / 75%Developers, System Admins, DevOps, SREs, ManagersNone
CKA (Kubernetes Administrator)IntermediatePerformance-Based Lab120 min / 66%Cluster Administrators, Infrastructure EngineersNone
CKAD (Application Developer)IntermediatePerformance-Based Lab120 min / 66%Cloud Developers, DevOps EngineersNone
CKS (Kubernetes Security Specialist)AdvancedPerformance-Based Lab120 min / 67%DevSecOps Engineers, Security SpecialistsActive CKA Required

Strategic Progression Roadmap

  1. Step 1: KCNA (Foundational) — Master theoretical concepts across Kubernetes, application delivery pipelines, telemetry, and CNCF architecture principles.
  2. Step 2: CKA or CKAD (Intermediate) — Transition from conceptual understanding to hands-on command-line proficiency using kubectl to configure, inspect, build, and troubleshoot live Kubernetes clusters.
  3. Step 3: CKS (Advanced) — Specialize in cluster security, network policy enforcement, RBAC hardening, container image scanning, runtime threat detection, and vulnerability mitigation after obtaining the CKA.

PSI Bridge Proctoring & Exam Day Logistics

The KCNA exam is delivered globally via the PSI Bridge online proctoring platform. Adhering to strict testing guidelines ensures a smooth, uninterrupted exam experience.

System & Testing Environment Requirements

  • Testing Space: Candidates must test in a private, quiet room with a closed door, clean desk, clear walls, and no secondary monitors, smart devices, phones, or written notes within reach.
  • Hardware & Network: A computer running Windows, macOS, or Linux equipped with a functional webcam, microphone, reliable high-speed internet connection, and the PSI Secure Browser application.
  • Identification: A valid, unexpired, government-issued photo ID (such as a passport or driver's license) displaying the exact legal name registered on The Linux Foundation candidate profile.

Scheduling, Retake Policy, and Results

  • 12-Month Window: Exam vouchers remain active for 12 months from purchase. Both your initial attempt and any retake must be completed within this period.
  • Free Retake: Every registration includes one complimentary retake if you do not achieve the 75% passing mark on your first attempt.
  • Score Reporting: Official score reports detailing your overall percentage and domain breakdown are sent via email by The Linux Foundation within 24 hours of exam submission.

Official CNCF & Linux Foundation Resources

To complement this study guide, consult the following authoritative official references:

Test Your Knowledge

What is the passing score, question count, and time limit for the Kubernetes and Cloud Native Associate (KCNA) exam?

A
B
C
D
Test Your Knowledge

Which CNCF blueprint domain carries the largest weight on the KCNA exam, and what percentage does it account for?

A
B
C
D
Test Your Knowledge

Which of the following statements accurately describes the CNCF certification progression roadmap?

A
B
C
D