KCNA — CNCF Certification Path

3 minute read

CNCF Certification Path

The Cloud Native Computing Foundation (CNCF) offers five Kubernetes-related certifications. Understanding the full landscape helps you plan a learning journey that matches your career goals.

The Certification Landscape

              ┌───────────────────────┐
              │    CKS (Advanced)     │
              │  Security Specialist  │
              │    Requires: CKA      │
              └──────────┬────────────┘
                         │
           ┌─────────────┴─────────────┐
           │                           │
    ┌──────┴──────┐            ┌───────┴──────┐
    │     CKA     │            │     CKAD     │
    │   Admin     │            │   Developer  │
    │ Intermediate│            │ Intermediate │
    └──────┬──────┘            └───────┬──────┘
           │                           │
           └─────────────┬─────────────┘
                         │
           ┌─────────────┴─────────────┐
           │                           │
    ┌──────┴──────┐            ┌───────┴──────┐
    │    KCNA     │            │    KCSA      │
    │  Associate  │            │   Security   │
    │    Entry    │            │    Entry     │
    └─────────────┘            └──────────────┘

Each Certification Explained

KCNA — Kubernetes and Cloud Native Associate

  • Level: Entry
  • What it proves: You understand Kubernetes and cloud-native concepts
  • Format: Multiple-choice
  • Best for: Beginners, career changers, anyone starting their K8s journey
  • Where it leads: CKA, CKAD, or KCSA

KCSA — Kubernetes and Cloud Native Security Associate

  • Level: Entry
  • What it proves: You understand cloud-native security concepts
  • Format: Multiple-choice
  • Best for: Security-curious engineers, anyone interested in K8s security
  • Where it leads: CKA → CKS

CKA — Certified Kubernetes Administrator

  • Level: Intermediate
  • What it proves: You can build, manage, and troubleshoot Kubernetes clusters
  • Format: Performance-based (live terminal)
  • Best for: DevOps engineers, SREs, platform engineers
  • Where it leads: CKS

CKAD — Certified Kubernetes Application Developer

  • Level: Intermediate
  • What it proves: You can design, build, and deploy applications on Kubernetes
  • Format: Performance-based (live terminal)
  • Best for: Developers who work with Kubernetes
  • Where it leads: CKS (via CKA)

CKS — Certified Kubernetes Security Specialist

  • Level: Advanced
  • What it proves: You can secure Kubernetes clusters hands-on
  • Format: Performance-based (live terminal)
  • Requires: Active CKA certification
  • Best for: Security engineers, senior DevOps/SRE professionals
KCNA → CKA → CKS

This is the most common path for DevOps engineers and platform teams. You start with concepts, move to administration, then layer on security.

Step Certification Study Time What You Gain
1 KCNA 2-3 weeks Conceptual foundation
2 CKA 4-6 weeks Hands-on admin skills
3 CKS 3-4 weeks Security implementation

Developer Track

KCNA → CKAD

For developers who deploy applications on Kubernetes but don’t manage the infrastructure.

Security Track

KCNA → KCSA → CKA → CKS

For people building toward a Kubernetes security career. The two associate certs give you theory; CKA and CKS give you hands-on skills.

Associate Duo

KCNA → KCSA

Both are theory-based MCQ exams. Together, they cover the full breadth of Kubernetes knowledge — general concepts and security concepts — without requiring hands-on skills.

How KCNA Prepares You for Advanced Certifications

Everything you learn in KCNA becomes the foundation for what comes next:

KCNA Topic How It Helps in CKA/CKAD
K8s Architecture You’ll know what API server, etcd, and kubelet do before managing them
Core Resources Pods, Deployments, Services are used in every CKA/CKAD task
Container Runtimes Understanding CRI helps when troubleshooting runtime issues in CKA
Networking Concepts CNI and service networking appear in CKA’s networking domain
Observability Understanding Prometheus and logging helps with CKA’s troubleshooting domain
Helm & GitOps CKAD tests Helm usage directly

Key Takeaways for the Exam

  • KCNA is the recommended starting point for the Kubernetes certification journey
  • CKS is the only certification with a prerequisite (active CKA)
  • KCNA and KCSA are both MCQ — you can take them in any order
  • The operations path (KCNA → CKA → CKS) is the most popular career progression
  • KCNA is the broadest certification — it covers more topics than any other CNCF cert, but at a shallower depth

What’s Next?

Let’s explore the CNCF landscape — the ecosystem of tools and projects you need to know for the KCNA exam.

Cloud Native Landscape →

Updated:

You may also enjoy