KCNA — KCNA vs CKA vs CKAD
KCNA vs CKA vs CKAD
The CNCF offers five Kubernetes certifications. Understanding how they compare helps you choose the right starting point and plan your learning path.
All Five Certifications at a Glance
| Certification | Level | Format | Focus | Prerequisites | Cost |
|---|---|---|---|---|---|
| KCNA | Entry | MCQ | General K8s & cloud-native concepts | None | $250 |
| KCSA | Entry | MCQ | Security concepts & awareness | None | $250 |
| CKA | Intermediate | Performance-based | Cluster administration | None | $395 |
| CKAD | Intermediate | Performance-based | App development on K8s | None | $395 |
| CKS | Advanced | Performance-based | Hands-on cluster security | Active CKA required | $395 |
KCNA vs CKA — The Most Common Comparison
This is the comparison most people ask about. Here’s how they differ:
| Aspect | KCNA | CKA |
|---|---|---|
| Level | Beginner / Associate | Intermediate |
| Format | Multiple-choice (~60 Qs) | Performance-based (15-20 tasks) |
| Duration | 90 minutes | 120 minutes |
| Passing Score | 75% | 66% |
| Terminal Access | No | Yes — live Kubernetes cluster |
| Docs Allowed | No | kubernetes.io during exam |
| Focus | “Do you understand Kubernetes?” | “Can you manage a Kubernetes cluster?” |
| Topics | Architecture, ecosystem, observability, CI/CD | kubeadm, RBAC, troubleshooting, etcd, networking |
| Difficulty | ★★☆☆☆ | ★★★★☆ |
| Ideal For | Beginners, career changers | DevOps engineers, SREs, platform teams |
The analogy: KCNA is like a written driving test — it checks whether you understand the rules. CKA is like the actual driving test — it checks whether you can operate the vehicle.
KCNA vs CKAD
| Aspect | KCNA | CKAD |
|---|---|---|
| Level | Beginner / Associate | Intermediate |
| Format | Multiple-choice | Performance-based |
| Focus | Breadth of cloud-native knowledge | Building apps on Kubernetes |
| Topics | Architecture, ecosystem, observability, delivery | Pods, Deployments, Services, Jobs, Probes, Volumes |
| Hands-On | No | Yes — you’ll write YAML and run kubectl |
| Ideal For | Starting out, understanding the landscape | Developers deploying to Kubernetes |
KCNA vs KCSA
Both are entry-level, MCQ-based certifications, but they cover different areas:
| Aspect | KCNA | KCSA |
|---|---|---|
| Focus | General Kubernetes & cloud-native | Security concepts & threat awareness |
| Biggest Domain | K8s Fundamentals (46%) | Cluster Component Security (22%) |
| Topics | Architecture, resources, observability, CI/CD | 4Cs, RBAC, PSS, threat modeling, CIS benchmarks |
| Ideal For | General Kubernetes understanding | Security-focused roles |
You can take them in any order. Many people do KCNA first (general concepts) then KCSA (security layer).
When to Take Which Certification
Take KCNA If…
- You’re brand new to Kubernetes
- You want a structured way to learn cloud-native fundamentals
- You’re planning to take CKA or CKAD later and want a foundation
- You’re in a non-technical role and need to understand cloud-native concepts
- You prefer starting with theory before hands-on practice
Take CKA If…
- You already understand Kubernetes basics and want to prove operational skill
- You’re a DevOps engineer, SRE, or platform engineer
- You need to manage production Kubernetes clusters
- You want to take CKS eventually (CKA is required)
Take CKAD If…
- You’re a developer who deploys applications on Kubernetes
- You want to master Pod design patterns, probes, and resource management
- You prefer building apps over managing infrastructure
Recommended Learning Paths
Path 1: KCNA → CKA → CKS (Operations Track)
KCNA (concepts) → CKA (admin skills) → CKS (security implementation)
Best for: DevOps engineers, platform engineers, SREs who want the full operations stack.
Path 2: KCNA → CKAD (Developer Track)
KCNA (concepts) → CKAD (developer skills)
Best for: Developers who deploy to Kubernetes and want to understand the platform deeply.
Path 3: KCNA → KCSA (Associate Track)
KCNA (general concepts) → KCSA (security concepts)
Best for: Building a broad theoretical foundation before going hands-on.
Path 4: Standalone KCNA
KCNA (done!)
Best for: Career changers, managers, or anyone who wants to validate their cloud-native understanding without committing to hands-on certifications.
Key Takeaways for the Exam
- KCNA is conceptual (MCQ), while CKA and CKAD are practical (performance-based)
- KCNA covers the broadest range of topics at the shallowest depth
- KCNA is the only certification that covers observability, CI/CD, and GitOps — CKA and CKAD don’t test these
- CKS is the only certification with a prerequisite (active CKA)
- KCNA and KCSA are both entry-level MCQ exams — one for general concepts, one for security
What’s Next?
Let’s look at the full CNCF certification landscape and map out the recommended learning paths in more detail.
