The Best Order to Take the CNCF Kubernetes Certifications
Which CNCF Kubernetes certification should you take first?
If you are staring at the CNCF certification catalogue and wondering where to start, you are not alone. There is a family of exams - KCNA, KCSA, CKAD, CKA and CKS being the most talked about - and they overlap enough that the order matters. Sit them in the wrong sequence and you will pay twice for the same knowledge. Sit them in the right one and each exam becomes a natural progression from the last.
The short answer for most working engineers: start with KCNA if you are new to cloud native, jump straight to CKA if you already run workloads, then layer CKAD or CKS depending on whether you write apps or secure them. The rest of this post explains why, and how to prepare for the pivot exam in the middle - the Certified Kubernetes Administrator (CKA) mock test. We recommend pairing this with Why CKS Is the Hardest CNCF Kubernetes Exam. Looking for more detail? See CKA vs CKAD vs CKS: Which Kubernetes Certification Should You Take First?.
Why CKA is the anchor
CKA is the anchor because everything else assumes you can operate a cluster. CKAD assumes you can deploy into one. CKS assumes you can harden one. If you cannot troubleshoot a broken node or reason about the control plane, the specialist exams turn into memorisation exercises that fall apart the moment your day job hands you a real incident.
CKA is also the exam that most closely matches what platform and SRE teams actually do. That makes the study time reusable. Hours spent learning etcd backups, scheduling, and networking are hours you will bill back at work, whether or not you sit the exam next month. When you are ready to stress-test what you know, a CKA mock test pack is a cheap way to expose the gaps before exam day does. For more on this topic, see our guide on Database Administrator (DBA) Certifications That Actually Pay Off.
The recommended order
- KCNA - only if cloud native is new to you. It is a multiple-choice associate exam and a gentle on-ramp.
- CKA - the operational core. Everything downstream depends on it.
- CKAD - if you build applications on Kubernetes. Much of the CKA muscle memory transfers directly.
- CKS - security specialist. CKA is a formal prerequisite, so this one is not optional to defer.
- KCSA - a security associate exam useful for GRC-leaning roles who do not need CKS depth.
Engineers who already ship containers to production can usually skip KCNA and go straight to CKA. Do not skip the hands-on practice, though - CKA is a performance exam in a live cluster, not a quiz.
If you are planning your preparation timeline, a free CKA study plan can give you a schedule that fits your available time.
What the CKA covers, at the official weightings
The CKA is 60 minutes shy of a full working morning - two hours in a real cluster - and the curriculum weights, published by the Linux Foundation, are the map you should study against. Weightings tell you where to spend the disproportionate share of your practice time. Troubleshooting is the largest slice, and it is also the domain that punishes theory-only preparation the hardest. If you're preparing for this exam, CKAD (Certified Kubernetes Application Developer): A Study Plan is essential reading.
| Domain | Weight |
|---|---|
| Troubleshooting | 30% |
| Cluster Architecture, Installation and Configuration | 25% |
| Services and Networking | 20% |
| Workloads and Scheduling | 15% |
| Storage | 10% |
How do I pass CKA without wasting weeks?
Three habits separate people who pass first-time from people who resit. First, live in a real cluster. Spin one up with kubeadm at least once end-to-end. Second, learn to read the failure - kubectl describe, journalctl on the kubelet, etcd health - faster than you learn to write manifests. Third, rehearse under a clock. Two minutes per task is not much once you factor in reading the question and verifying your fix. Before moving on, consider reading Are IT Certifications Still Worth It in 2026?.
A knowledge check is the cheapest way to find out what you do not know yet. Use a practise exam for Kubernetes to sweep the curriculum, then go back into a cluster and drill the weak domains until the muscle memory is there.
What this mock contains, and what it does not
Be honest with yourself about what a written mock can and cannot prove. The real CKA has no multiple-choice questions at all - it is entirely hands-on work in a live cluster. Our mock test is a knowledge check over the same published curriculum, at the official domain weightings above. It will tell you whether you know the material. It cannot tell you whether you can execute under exam conditions, and passing it is not evidence that you would pass CKA. Treat it as one instrument in a preparation kit that must also include real cluster practice.
Pair that mock with a free CKA readiness check to get a quick look at the topics you should revisit before exam day.
Eliminate surprises on test day — Certified Kubernetes Administrator (CKA) exam simulations cover the question types the exam actually uses.