Kubernetes Certifications: CKA vs CKAD vs CKS, Which First?

Kubernetes has become the standard platform for running containerised applications, and the Linux Foundation, together with the Cloud Native Computing Foundation (CNCF), offers three well-known hands-on certifications: CKA (Certified Kubernetes Administrator), CKAD (Certified Kubernetes Application Developer) and CKS (Certified Kubernetes Security Specialist). All three are respected precisely because they are practical: you have to do the work, not just recognise the right answer. This guide compares them and suggests a sensible order.

What makes these exams different

Unlike most IT certifications, CKA, CKAD and CKS are performance-based. During the exam you work in a browser-based environment with a terminal connected to live Kubernetes clusters and complete a series of tasks within a fixed time. Tasks might involve creating resources, troubleshooting a broken deployment or locking down access.

The exams are delivered online with remote proctoring, so you sit them from your own computer under supervision. Exam rules have permitted access to specific official documentation during the exam; check the current list of allowed resources in the candidate handbook rather than assuming. Exam duration, passing scores, Kubernetes versions, retake policy and certification validity are all set by the Linux Foundation and are updated from time to time.

CKA: Certified Kubernetes Administrator

CKA focuses on running and maintaining clusters. It is aimed at platform engineers, system administrators, DevOps and site reliability engineers.

Typical areas

• Cluster architecture, installation and configuration
• Workloads and scheduling
• Services and networking
• Storage
• Troubleshooting clusters, nodes and applications

Troubleshooting is a big part of the job and of the exam. You need to be comfortable reading logs, checking component status and working out why something is not behaving as expected.

CKAD: Certified Kubernetes Application Developer

CKAD focuses on designing, building and deploying applications on Kubernetes. It suits developers and engineers who ship workloads to clusters but do not necessarily manage the clusters themselves.

Typical areas

• Application design and build, including multi-container pod patterns
• Application deployment strategies
• Application observability and maintenance, such as probes and logging
• Application environment, configuration and security, including ConfigMaps, Secrets and resource limits
• Services and networking from an application point of view

CKAD rewards speed. Tasks are often smaller than in CKA, but there are many of them, so fluency with kubectl and YAML matters.

CKS: Certified Kubernetes Security Specialist

CKS focuses on securing clusters and workloads. It is the most advanced of the three and requires an active CKA before you can sit it.

Typical areas

• Cluster setup and hardening
• System hardening of nodes and the host environment
• Minimising microservice vulnerabilities
• Supply chain security for container images
• Monitoring, logging and runtime security

CKS often involves additional tools beyond core Kubernetes. Check the current curriculum on the Linux Foundation or CNCF site for the exact tools and topics in scope.

Which should you take first?

• You are a developer deploying apps: start with CKAD. It maps directly to your work.
• You run or support clusters: start with CKA.
• You want to specialise in security: start with CKA, because it is a prerequisite for CKS.
• You are unsure: CKA is the most common starting point because it covers the broadest operational ground and opens the path to CKS.

The CKA and CKAD curricula overlap considerably, so many people take the second soon after the first while the skills are fresh. Whichever you choose, check how long the certification remains valid and plan any renewal or follow-on exam with that date in mind.

How to prepare for a hands-on Kubernetes exam

1. Build your own practice cluster with a local tool or a cloud provider, and break things on purpose.
2. Use kubectl imperative commands to generate YAML quickly rather than writing everything by hand.
3. Learn to navigate the official documentation fast, since searching efficiently is a skill in itself.
4. Practise under time pressure. Set a timer and work through realistic task sets.
5. Get comfortable with Linux basics, including a terminal text editor, systemd and file permissions.
6. Read the curriculum line by line and tick off each item only when you can do it without notes.

Exam-day habits worth practising

• Always switch to the cluster or context named in each task before you start working. Doing the right thing on the wrong cluster earns nothing.
• Read the whole task first, noting namespaces, names and exact requirements.
• Verify your work with a quick get or describe before moving on.
• Skip and return if a task is taking far longer than its weighting justifies.

Because these exams are proctored online, also read our online proctored exam checklist to avoid technical surprises.

How a personal 1-to-1 assistant can help

Practical exams reward steady, structured practice. A personal 1-to-1 study assistant can help you choose between CKA, CKAD and CKS, plan your lab work, explain concepts you keep getting stuck on and review your approach to timed practice tasks. With FoxyCert, you communicate with your assistant on Telegram, which makes it easy to ask a question in the middle of a lab session. You sit your own exam on your own computer under the proctor's rules; FoxyCert provides coaching only, with all services included until you pass. See FoxyCert's 1-to-1 exam prep.