← All Certifications
Kubernetes

Kubernetes CKA Certification

CKA · Performance-based

Last updated: March 31, 2026

Exam Syllabus & Domains

The Kubernetes CKA certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 25%

Cluster Architecture, Installation & Configuration

  • 1.1 Manage role-based access control (RBAC)
  • 1.2 Use kubeadm to install a basic cluster
  • 1.3 Manage a highly-available Kubernetes cluster
  • 1.4 Provision underlying infrastructure to deploy a cluster
  • 1.5 Perform a version upgrade on a Kubernetes cluster using kubeadm
  • 1.6 Implement etcd backup and restore
Control Plane Components (API Server, etcd, Scheduler, Controller Manager)kubeadm init and joinRBAC Roles, ClusterRoles, RoleBindings, ClusterRoleBindingsetcd Backup and Restore (etcdctl snapshot)Cluster Upgrade with kubeadmTLS Certificate Managementkube-proxy Modes (iptables, IPVS)kubelet ConfigurationHigh Availability Control Plane SetupServiceAccount Token Automation
Domain 2 15%

Workloads & Scheduling

  • 2.1 Understand deployments and how to perform rolling updates and rollbacks
  • 2.2 Use ConfigMaps and Secrets to configure applications
  • 2.3 Know how to scale applications
  • 2.4 Understand how resource limits can affect Pod scheduling
  • 2.5 Awareness of manifest management and common templating tools
Deployments (Rolling Updates, Rollbacks)ReplicaSets and ScalingDaemonSets for Node-Level PodsStatefulSets for Stateful ApplicationsJobs and CronJobsConfigMaps and SecretsResource Requests and LimitsNode Selectors and Node AffinityTaints and TolerationsPod Priority and Preemption
Domain 3 20%

Services & Networking

  • 3.1 Understand host networking configuration on cluster nodes
  • 3.2 Understand connectivity between Pods
  • 3.3 Understand ClusterIP, NodePort, LoadBalancer service types
  • 3.4 Know how to use Ingress controllers and Ingress resources
  • 3.5 Know how to configure and use CoreDNS
  • 3.6 Choose an appropriate container network interface plugin
Service Types (ClusterIP, NodePort, LoadBalancer, ExternalName)Ingress Controllers and Ingress ResourcesNetworkPolicy for Pod-Level Firewall RulesCoreDNS ConfigurationCNI Plugins (Calico, Flannel, Weave)Pod Networking Model (Flat Network)kube-proxy and Service DiscoveryDNS for Services and PodsHeadless Services
Domain 4 10%

Storage

  • 4.1 Understand storage classes and persistent volumes
  • 4.2 Understand volume mode, access modes and reclaim policies
  • 4.3 Understand persistent volume claims
  • 4.4 Know how to configure applications with persistent storage
PersistentVolume (PV) and PersistentVolumeClaim (PVC)StorageClass and Dynamic ProvisioningAccess Modes (RWO, ROX, RWX)Reclaim Policies (Retain, Delete, Recycle)Volume Types (hostPath, emptyDir, NFS, CSI)CSI (Container Storage Interface) DriversVolume SnapshotsEphemeral VolumesProjected Volumes
Domain 5 30%

Troubleshooting

  • 5.1 Evaluate cluster and node logging
  • 5.2 Understand how to monitor applications
  • 5.3 Manage container stdout and stderr logs
  • 5.4 Troubleshoot application failures
  • 5.5 Troubleshoot cluster component failures
  • 5.6 Troubleshoot networking
kubectl describe/logs/exec for DebuggingPod States (Pending, Running, CrashLoopBackOff, ImagePullBackOff)Node Troubleshooting (NotReady, Disk/Memory Pressure)Control Plane Component Logsetcd Health and RecoveryNetwork Debugging (DNS, Connectivity)Service Endpoint VerificationContainer Runtime Debuggingjournalctl for kubelet LogsMetrics Server and Resource Monitoring

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Cluster Architecture, Installation & Configuration
25%
D2 Workloads & Scheduling
15%
D3 Services & Networking
20%
D4 Storage
10%
D5 Troubleshooting
30%

Study Tips

Free Study Resources

📋

Study Roadmap

Week-by-week study plan with free resources

 ✅

Study Tracker

Track objective completion with progress dashboard

 💰

Cost Calculator

Total cost breakdown and ROI analysis

 🧪

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the Kubernetes CKA Practice Quiz

Get the Kubernetes CKA Study Planner

Fillable PDF with 10-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your Kubernetes CKA certification training:

Frequently Asked Questions

What is the Kubernetes CKA certification?

The Kubernetes CKA (CKA) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the Kubernetes CKA certification syllabus cover?

The Kubernetes CKA exam syllabus covers Performance-based. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for Kubernetes CKA?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for Kubernetes CKA?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.