CNCF certification practice
Practise KCNA NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations. Courseiva helps you prepare with realistic practice questions, topic-based revision, explained answers and structured study routes.
New here? Start with this
Recommended: 10-question diagnostic
Covers all 5 domains · takes ~5 min · no account needed · shows your weak areas immediately
Key facts for the Kubernetes and Cloud Native Associate KCNA exam.
Exam cost
$250 USD / ~£200
Duration
90 minutes
Question count
60 questions
Passing score
75%
Validity
3 years
Delivered by
The Linux Foundation (PSI Online)
Online proctored
Yes — available
Retake policy
100% free — no account required
Everything on Courseiva for KCNA is free — no subscription, no trial, no email wall.
Courseiva provides free Kubernetes and Cloud Native Associate KCNA (KCNA) practice questions with original exam-style questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics. Courseiva is an independent platform and is not affiliated with CNCF.
One free retake included; subsequent retakes require repurchase
Question formats
The Kubernetes and Cloud Native Associate (KCNA) is a foundational, multiple-choice certification from the CNCF and The Linux Foundation that tests conceptual knowledge of Kubernetes and the broader cloud native ecosystem. It covers Kubernetes fundamentals, container orchestration principles, cloud native architecture, the CNCF landscape, and core cloud native observability concepts. Unlike the CKA, CKAD, and CKS, the KCNA is a proctored multiple-choice exam — not a hands-on performance test. It is designed for candidates who are beginning their cloud native journey and want a recognised credential before investing in the more demanding practitioner certifications.
Official prerequisite
None — no formal prerequisites
Recommended experience
Basic understanding of Linux, networking, and cloud concepts; some exposure to containers (Docker) is helpful but not required
Beginners who want to validate foundational cloud native and Kubernetes knowledge before pursuing hands-on certifications like the CKAD or CKA
Should you skip this exam?
Engineers already working hands-on with Kubernetes daily — the KCNA is conceptual and will feel too introductory; go straight to the CKAD or CKA
Courseiva study tip
Focus on the CNCF landscape (what each project does), Kubernetes object definitions, and cloud native design principles — the exam tests breadth of knowledge, not deep command-line skill.
UK salary range
£35,000 – £55,000
US salary range
$65,000 – $95,000
Job roles that cite KCNA
What certification to take next
The KCNA costs $250 USD and includes one free retake. This is less expensive than the hands-on CNCF certifications (CKA, CKAD, CKS) which cost $395 each.
You need to score at least 75% to pass the KCNA. Results are typically available within 24 hours of completing the exam.
The KCNA has 60 multiple-choice and multiple-response questions, which you must complete within 90 minutes.
The KCNA covers Kubernetes fundamentals (~46%), container orchestration (~22%), cloud native architecture (~16%), cloud native observability (~8%), and cloud native application delivery (~8%). It tests conceptual understanding, not hands-on cluster tasks.
If you are already working hands-on with Kubernetes, the KCNA may be too introductory. You would likely get more career value from the CKAD or CKA, which demonstrate practical skills employers directly test for.
The KCNA certification is valid for 3 years from the date you pass. You renew by passing the exam again.
Yes — the KCNA builds the conceptual vocabulary (pods, deployments, services, namespaces, CNCF ecosystem) that underpins the hands-on exams. However, it does not replace practical lab practice; you will still need significant hands-on preparation before attempting the CKA or CKAD.
See how KCNA stacks up against related certifications.
Practice modes
Choose a mode that matches your current study phase. Use topic practice early on and mock exams closer to your exam date.
All KCNA Questions
Browse the full question bank organised by domain and difficulty.
Practice Test
Start a session with detailed answer explanations after each question.
Mock Exam
Simulate the real exam with a timed, full-length question set.
Quick 10
A 10-question warm-up — ideal for a short daily study session.
Flashcards
Reinforce key terms, commands, and protocol facts with flashcards.
Domain Practice
Focus exclusively on one exam domain to target your weakest area.
50-Question Set
Mid-length practice set covering all domains.
Full-length Simulation
Full exam simulation matching the real question count.
Exam guide
Start with a short practice session, review each missed answer, then return to the topics that caused mistakes.
Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
IaaS, PaaS and SaaS responsibilities and examples.
Public, private, hybrid and community cloud deployment models.
On-premises vs cloud trade-offs: cost, control, scalability.
How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.
Related practice questions
Use these internal links to move from the exam guide into focused topic practice pages.
Practise KCNA questions linked to Kubernetes Fundamentals.
Practise KCNA questions linked to Container Orchestration.
Practise KCNA questions linked to Cloud Native Architecture.
Practise KCNA questions linked to Cloud Native Observability.
Practise KCNA questions linked to Cloud Native Application Delivery.
Practise KCNA questions linked to KCNA fundamentals.
Practise KCNA questions linked to KCNA scenario.
Practise KCNA questions linked to KCNA troubleshooting.
Practice directory
Every practice set is a unique selection of questions — numbered tests, domain-focused sessions, and topic-specific quizzes.
Showing 30 of 64 tests. See all 64 KCNA practice tests →
Timed mode
Official blueprint
Target weak areas by practising questions from a single domain. Each domain page shows all questions, difficulty breakdown, and a focused practice session.
Practise KCNA questions in this domain →
Practise KCNA questions in this domain →
Practise KCNA questions in this domain →
Practise KCNA questions in this domain →
Practise KCNA questions in this domain →
Term reference
These terms appear frequently in KCNA questions. Understanding them precisely reduces guessing and improves scores.
Cloud Native Concepts
Cloud native concepts are a set of practices and technologies that allow applications to be built, deployed, and scaled dynamically in modern cloud environments like public, private, and hybrid clouds.
Container Runtime Interface
The Container Runtime Interface (CRI) is a standardized plugin protocol that allows Kubernetes to work with different container runtimes without needing to change its core code.
Service Mesh
A service mesh is a dedicated infrastructure layer that manages communication between microservices, handling tasks like service discovery, load balancing, encryption, and observability without requiring changes to application code.
Container Orchestration Basics
Container orchestration is the automated process of managing, deploying, scaling, and networking containers across multiple servers.
Pod Lifecycle
The Pod Lifecycle describes the sequence of states a Kubernetes pod passes through from creation to termination, including pending, running, succeeded, failed, and unknown conditions.
Serverless computing
Serverless computing is a cloud execution model where the cloud provider dynamically manages the allocation and provisioning of servers, allowing developers to write and deploy code without thinking about the underlying infrastructure.
Kubernetes API Primitives
Kubernetes API Primitives are the basic building blocks that the Kubernetes API uses to represent and manage the state of a cluster, such as Pods, Services, Deployments, and Namespaces.
ReplicaSet and Replication
A ReplicaSet ensures a specified number of identical pod instances are running at all times in Kubernetes, using replication to maintain availability and stability.
Free study guide
The Courseiva KCNA study guide covers exam format, the official domain blueprint with weights, a structured study plan, and domain-specific tips for each section. Use it alongside practice questions to build both conceptual depth and exam confidence.
Sample questions
Select your answer before revealing the explanation. These questions are original exam-style — not copied from any exam or dump site.
Drag a concept onto its matching description — or click a concept then click the description.
Smallest deployable unit containing one or more containers
Stable network endpoint to access a set of Pods
Stores non-sensitive configuration data as key-value pairs
Cluster-wide storage resource provisioned by an administrator
Manages external access to services, typically HTTP
Drag a concept onto its matching description — or click a concept then click the description.
Identity for processes running in a pod
Role-based access control to authorize API requests
Specifies how groups of pods are allowed to communicate
Deprecated but formerly controlled security-sensitive pod settings
Stores sensitive data like passwords and tokens
Trap 1: kubectl get pods
Lists Pods but does not show logs.
Trap 2: kubectl describe pod <pod-name>
Describes Pod status but not logs.
Trap 3: kubectl exec -it <pod-name> -- sh
Requires a running container; crashing Pod may not allow exec.
kubectl get pods
Why wrong: Lists Pods but does not show logs.
kubectl logs <pod-name> --previous
Shows logs from the previous container instance, useful for crash logs.
kubectl describe pod <pod-name>
Why wrong: Describes Pod status but not logs.
kubectl exec -it <pod-name> -- sh
Why wrong: Requires a running container; crashing Pod may not allow exec.
Trap 1: Store the API key in a ConfigMap and reference it in the Pod spec.
ConfigMaps are for non-confidential data; Secrets are for sensitive data.
Trap 2: Embed the API key directly in the container image.
Embedding secrets in images is insecure and violates best practices.
Trap 3: Store the API key in a Pod annotation and read it with kubectl.
Annotations are not meant for secrets; they are metadata and not secure.
Create a Secret with the API key and use envFrom or valueFrom in the Pod spec.
Secrets are designed for confidential data and can be injected as environment variables.
Store the API key in a ConfigMap and reference it in the Pod spec.
Why wrong: ConfigMaps are for non-confidential data; Secrets are for sensitive data.
Embed the API key directly in the container image.
Why wrong: Embedding secrets in images is insecure and violates best practices.
Store the API key in a Pod annotation and read it with kubectl.
Why wrong: Annotations are not meant for secrets; they are metadata and not secure.
Trap 1: Helm
Helm is a package manager for Kubernetes, not a GitOps operator.
Trap 2: Kustomize
Kustomize is for customizing Kubernetes manifests, not for continuous sync.
Trap 3: Prometheus
Prometheus is a monitoring system, not a GitOps tool.
Helm
Why wrong: Helm is a package manager for Kubernetes, not a GitOps operator.
Argo CD
Argo CD is a GitOps tool that syncs cluster state with a Git repository.
Kustomize
Why wrong: Kustomize is for customizing Kubernetes manifests, not for continuous sync.
Prometheus
Why wrong: Prometheus is a monitoring system, not a GitOps tool.
Drag a concept onto its matching description — or click a concept then click the description.
Default service type; exposes service on a cluster-internal IP
Exposes service on each node's IP at a static port
Exposes service externally using a cloud provider's load balancer
Service without a cluster IP; used for direct pod-to-pod communication
Implements traffic routing rules defined by Ingress resources
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.