KCNA: Kubernetes and Cloud Native Associate
1. Exam Overview and Mechanics#
Unlike the CKAD, CKA, and CKS which are 100% terminal-based, the KCNA is a traditional multiple-choice exam.
- Duration: 90 Minutes
- Questions: 60 Multiple Choice Questions (MCQs)
- Passing Score: 75%
- Format: Proctored online via a web browser.
- Prerequisites: None.
Because it is multiple-choice, the KCNA tests breadth of knowledge over depth. You do not need to know how to write a complex Kubernetes Deployment YAML from memory, but you must know what a Deployment is, how it differs from a StatefulSet, and what role it plays in the overall architecture.
2. Curriculum Breakdown#
The Linux Foundation strictly defines the curriculum domains. You must study across these five pillars:
Domain 1: Kubernetes Fundamentals (46%)#
This is the largest section of the exam. You must understand the core architecture of a Kubernetes cluster.
- Control Plane Components: What does the
kube-apiserverdo? What isetcd? What is the role of thekube-schedulerandkube-controller-manager? - Worker Node Components: Understand
kubelet(the captain of the node),kube-proxy(networking), and the Container Runtime (e.g., containerd). - Core Resources: Know the theoretical differences between Pods, ReplicaSets, Deployments, DaemonSets, Jobs, and CronJobs.
- Networking: Understand the basic difference between a
ClusterIPand aNodePortservice.
Domain 2: Container Orchestration (22%)#
This domain tests your understanding of why we use container orchestration.
- Container Basics: What is an OCI (Open Container Initiative) image? How does a container differ from a Virtual Machine (Namespaces vs Hypervisors)?
- Scheduling Concepts: Why does Kubernetes schedule a Pod on Node A instead of Node B?
- Security: The concept of RBAC (Role-Based Access Control) and why Least Privilege is critical.
Domain 3: Cloud Native Architecture (16%)#
The CNCF landscape is massive. This domain tests your knowledge of the broader ecosystem.
- Autoscaling: Understand HPA (Horizontal Pod Autoscaler) vs VPA (Vertical Pod Autoscaler).
- Serverless: Understand the basic concepts of serverless architecture (e.g., Knative).
- Service Mesh: Know what a Service Mesh (like Istio or Linkerd) is, and why it is used for mTLS encryption and advanced traffic routing.
Domain 4: Cloud Native Observability (8%)#
How do we know if our applications are healthy?
- The Three Pillars of Observability: Metrics, Logs, and Traces.
- Prometheus: Understand that Prometheus is the CNCF standard for pulling (scraping) metrics.
- Fluentd/Fluent Bit: Understand their role as log aggregators.
- Jaeger/OpenTelemetry: Understand their role in Distributed Tracing.
Domain 5: Cloud Native Application Delivery (8%)#
How do we get code from a laptop into Production?
- CI/CD: Understand Continuous Integration vs Continuous Deployment.
- GitOps: Understand the concept of using Git as the single source of truth for declarative infrastructure (e.g., ArgoCD, Flux).
3. Preparation Strategy#
Because the KCNA covers so much ground, your best preparation strategy is familiarization with the CNCF Landscape.
- Review the CNCF Landscape Map: Go to landscape.cncf.io and ensure you can identify the primary tool for each major category (e.g., Prometheus for Monitoring, Argo for CI/CD, Envoy for Proxy).
- Read the Kubernetes Documentation: You do not need to read the tutorial sections on writing YAML, but you should read the “Concepts” section thoroughly. Pay special attention to the “Kubernetes Components” page.
- Take Practice Exams: There are numerous high-quality practice exams available online (Udemy, Linux Foundation). Because this is a multiple-choice exam, taking practice tests is the most effective way to identify your knowledge gaps.
Next Steps#
Once you pass the KCNA, you have proven that you understand the theory. The next logical step for anyone intending to work hands-on with Kubernetes is the CKAD (Certified Kubernetes Application Developer), where you will transition from theory to terminal-based execution.
