How to Pass the CKA (Certified Kubernetes Administrator) Exam

What Is the CKA?

The Certified Kubernetes Administrator (CKA) is a vendor-neutral certification from the CNCF that validates your ability to administer a Kubernetes cluster in production. Unlike traditional multiple-choice exams, the CKA is 100% performance-based — you solve real cluster problems in a live terminal environment.

Who should take it? Platform engineers, DevOps engineers, SREs, and Kubernetes administrators with 6+ months of hands-on K8s experience.

Exam details:

• 15-20 performance-based scenarios
• 2 hours
• $395 USD
• Passing score: 66%
• One free retake included
• Open-book: you can use kubernetes.io/docs during the exam

Exam Domains

Domain	Weight	Key Topics
Cluster Architecture, Installation & Configuration	25%	etcd backup/restore, kubeadm, cluster upgrades, CNI plugins, RBAC
Workloads & Scheduling	15%	Deployments, DaemonSets, StatefulSets, Jobs, CronJobs, resource limits, affinity/anti-affinity
Services & Networking	20%	Services (ClusterIP, NodePort, LoadBalancer), Ingress, NetworkPolicies, DNS, ServiceMesh basics
Storage	10%	PersistentVolumes, PersistentVolumeClaims, StorageClasses, CSI drivers
Troubleshooting	30%	Node failure, pod crashes, networking issues, etcd problems, control plane health

Critical Skills to Master

kubectl is your lifeline. You need to be fast with imperative commands:

# Create resources without YAML files
kubectl run nginx --image=nginx --restart=Never
kubectl create deployment web --image=nginx --replicas=3
kubectl expose pod nginx --port=80
kubectl set image deployment/web nginx=nginx:1.25

JSONPath and custom columns for filtering output:

kubectl get pods -o=jsonpath='{.items[*].spec.containers[*].image}'
kubectl get nodes -o=custom-columns=NAME:.metadata.name,STATUS:.status.conditions[-1].type

Debugging pods and nodes is the highest-weighted domain (30%). Know how to use kubectl debug, kubectl describe, kubectl logs --previous, and kubectl exec.

Study Approach: 6-8 Weeks

Week	Focus
1-2	Build a lab environment (killercoda, or k3s/kubeadm locally). Master kubectl.
3-4	Cluster architecture, etcd backup/restore, cluster upgrades. Practice RBAC.
5-6	Networking: Services, Ingress, NetworkPolicies. Storage: PV/PVC/StorageClass.
7-8	Troubleshooting drills. Take timed mock exams. Review weak areas.

Common Exam Traps

• Not knowing etcd commands — etcdctl snapshot save/restore is almost guaranteed to appear
• Running out of time — skip multi-step questions that aren't clicking and come back later. 2 hours goes fast when you're debugging.
• Not using kubectl shortcuts — kubectl run with flags instead of writing YAML saves massive time
• NetworkPolicy syntax — the podSelector vs namespaceSelector distinction trips people up
• kubeadm token management — know how to generate and manage bootstrap tokens

Practice Makes Perfect

Since the CKA is 100% hands-on, you must practice in a real cluster environment before exam day. Combine lab practice with Certeli's CKA practice questions to test your knowledge of Kubernetes concepts, YAML syntax, and architecture decisions.