Exam comparison
KCNA vs KCSA: Kubernetes foundations or security
Who should take each exam
KCNA is for beginners discovering Kubernetes and cloud-native technologies: containers, orchestration, application delivery. No prior experience required.
KCSA is also listed at « Experience Level: Beginner ». It is for those who want to focus on cloud-native security: authentication, isolation, compliance, secrets management, and image security.
In short: take KCNA for a broad first view of Kubernetes and cloud native; take KCSA if security is what you want to validate. Both are beginner-level exams.
Exam format
| KCNA | KCSA | |
|---|---|---|
| Code | KCNA | KCSA |
| Publisher | Linux Foundation / CNCF | |
| Duration | 90 minutes | |
| Format | Online multiple-choice, proctored | |
| Number of questions | 60 | |
| Passing score | 75% or above | |
| Validity | 2 years | |
| Prerequisites | None | None |
| Languages | English, Japanese, Simplified Chinese | English |
Domains and coverage
KCNA
- Kubernetes Fundamentals 44 %
- Container Orchestration 28 %
- Cloud Native Application Delivery 16 %
- Cloud Native Architecture 12 %
KCSA
- Overview of Cloud Native Security 14 %
- Kubernetes Cluster Component Security 22 %
- Kubernetes Security Fundamentals 22 %
- Kubernetes Threat Model 16 %
- Platform Security 16 %
- Compliance and Security Frameworks 10 %
Overlaps and differences
Overlaps: both exams cover Kubernetes at the concept and component level (pods, services, configurations).
Differences:
- KCNA explores breadth: containers, orchestration, application patterns, observability.
- KCSA dives deep into security: RBAC, network policies, secrets, image scanning, audit, compliance.
Which one to choose based on your profile
Choose KCNA if…
- You are new to Kubernetes and cloud-native technologies.
- You are preparing your first infrastructure certification.
- You focus on availability rather than security.
- You want to validate general understanding before specializing.
Choose KCSA if…
- Security is your domain or priority.
- You need to audit, harden, or comply with regulations on a cluster.
- You are pursuing a cloud-native security certification.
How to prepare
- Visit the official KCNA page or KCSA page for registration and exam rules.
- Work through the official CNCF curriculum (KCNA or KCSA) point by point, and deepen your knowledge in the official documentation.
- Practice with our KCNA practice exam or KCSA practice exam, then review weak areas in the KCNA study mode or KCSA study mode.
Try both, free
Original questions, each answer explained with a link to the documentation. Study mode is free and needs no account.
Practice Exam KCNA: Kubernetes and Cloud Native Associate
25 free questions with explanations
Practice Exam KCSA: Kubernetes and Cloud Native Security Associate
25 free questions with explanations