The Certified Kubernetes Administrator (CKA) exam isn’t a knowledge test, it’s a 2‑hour timed performance test on a real cluster. You either know how to drive kubectl under pressure, or you don’t. That’s the entire game.
The good news: you don’t need to spend hundreds of dollars on cloud labs to get there. Almost everything you need to pass the CKA can be assembled from free tools, free mock exams, and a little discipline. This guide shows you exactly how to do it, and how the free CK-X simulator fits into the picture as the closest free thing to the real PSI exam environment.
What the CKA Exam Actually Tests
Before you spend a single hour practicing, get the format crystal-clear. Most CKA failures aren’t a knowledge problem, they’re a format problem.
| Attribute | CKA Exam Reality |
|---|---|
| Format | Performance-based on a live multi-node cluster |
| Duration | 2 hours |
| Number of tasks | 15–20 hands-on scenarios |
| Passing score | 66% |
| Allowed tabs | One: kubernetes.io/docs (and a few sub-domains) |
| Environment | PSI Secure Browser with a remote desktop + terminal |
| Retake | One free retake within 12 months |
| Validity | 2 years |
If you’ve never used a remote-desktop-in-a-browser terminal under a ticking clock, you’re going to lose 10–15 minutes on day one just figuring out the UI. That’s why simulator practice matters more than another video course.
The Honest Cost of “Premium” CKA Prep
A full premium prep stack typically looks like this:
- A video course: $50–$150
- A killer.sh-style simulator: bundled with the exam voucher (2 sessions, 36 hours each)
- A cloud-lab subscription: $30–$60/month
- One or two third-party mock-exam packs: $40–$100
Total: easy to spend $200–$400 on top of the $395 exam fee.
Most of this is replaceable with free resources if you’re willing to be deliberate.
Free Resources That Actually Move the Needle
Not all free resources are equal. After working with hundreds of CKA aspirants, here’s the short list of free tools that have produced real pass results.
1. CK-X: Free, Open-Source CKA Simulator
CK-X is a free open-source Kubernetes exam simulator that runs real K3D clusters locally. It was built specifically because, until recently, there was no free simulator that matched the actual PSI exam interface.
What you get for free:
- A web-based remote desktop + terminal that mirrors the PSI exam UI
- Real Kubernetes clusters (no mocks, no toy environments)
- Timer-based exam mode
- Multi-question navigation (flag, skip, return)
- Automated validation against your live cluster
- CKA-specific exam scenarios
If you want a 5‑minute walkthrough before installing anything, this short demo shows the platform end-to-end:
2. The Official Kubernetes Documentation
The single most underrated CKA resource is kubernetes.io/docs. It’s the only doc you’re allowed to use during the exam, so the time you spend learning how to navigate it compounds.
Bookmark these pages and learn the URL slugs by muscle memory:
/docs/reference/kubectl/cheatsheet//docs/concepts/storage/persistent-volumes//docs/concepts/services-networking/network-policies//docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade//docs/reference/access-authn-authz/rbac/
3. Killercoda’s Free CKA Scenarios
Killercoda has a free tier of CKA scenarios you can run in-browser. They’re shorter than full mock exams but excellent for drilling individual topics.
4. kubectl, kind, and minikube
You should be running kubectl against a local cluster every single day. Either kind, minikube, or k3d will get you there in under 5 minutes:
# kind: recommended for multi-node practice
kind create cluster --config=kind-cluster.yaml
# k3d: what CK-X uses under the hood
k3d cluster create cka-practice --servers 1 --agents 2
# minikube
minikube start --nodes 2A Free 30-Day CKA Study Plan
Here’s a battle-tested 30-day plan using only free resources. It assumes ~1.5 hours/day on weekdays and ~3 hours on weekends.
| Week | Focus | Daily Practice |
|---|---|---|
| Week 1 | Cluster architecture, install, configure | kubeadm cluster setup, certificate inspection |
| Week 2 | Workloads, scheduling, services | Deployments, DaemonSets, taints/tolerations, Services |
| Week 3 | Storage, networking, security | PVs/PVCs, NetworkPolicy, RBAC, ServiceAccounts |
| Week 4 | Troubleshooting + full mock exams | etcd backup/restore, node troubleshooting, 2 timed mocks |
Week 1: Get the cluster basics into your fingers
Day 1–2: Install kubeadm. Bootstrap a 1‑control-plane + 2‑worker cluster from scratch. Don’t use a script. Type every command.
Day 3–4: Inspect static pod manifests in /etc/kubernetes/manifests/. Find every certificate under /etc/kubernetes/pki/ and know what each one is for.
Day 5–7: Practice kubeadm upgrade plan, kubeadm upgrade apply, and node draining/uncordoning. This is a near-guaranteed exam topic.
# The four commands you must own for cluster upgrades
kubectl drain <node> --ignore-daemonsets --delete-emptydir-data
kubeadm upgrade plan
kubeadm upgrade apply v1.x.y
kubectl uncordon <node>For a deeper walkthrough see our CKA cluster upgrade with kubeadm guide.
Week 2: Workloads and scheduling
You should be able to create the following imperatively, without notes, in under 30 seconds each:
- Deployment with replicas, image, resource limits
- Service of every type (ClusterIP, NodePort, LoadBalancer, ExternalName)
- ConfigMap from a file and from literals
- Secret from literal and from file
- Pod with nodeSelector, tolerations, and affinity rules
# Imperative shortcuts you must memorize
k create deploy nginx --image=nginx --replicas=3 --port=80
k expose deploy nginx --port=80 --target-port=80 --type=NodePort
k create cm app-config --from-literal=KEY=value --from-file=./config.json
k create secret generic db-creds --from-literal=password=s3cr3t
k run debug --image=busybox --rm -it --restart=Never -- shWeek 3: Storage, networking, and RBAC
CKA’s storage and networking sections trip up the most people. They’re also the easiest to drill, because the YAML is small and the verification is mechanical.
- Create a
StorageClass, aPersistentVolume, and aPersistentVolumeClaimthat bind to each other. - Write a
NetworkPolicythat allows ingress only from pods labeledrole=frontendin namespaceweb. - Create a
Role,RoleBinding, andServiceAccountandkubectl auth can-iyour way through verification.
For a deep dive see our CKA RBAC hands-on guide and CKA networking deep dive.
Week 4: Troubleshooting and full mock exams
This is where CK-X earns its keep. Run two full timed simulations under exam-realistic conditions:
- Single 24‑inch monitor only (the PSI exam doesn’t allow dual monitors).
- No notes other than
kubernetes.io/docs. - Strict 2‑hour timer.
- Webcam on (yes, simulate the surveillance, it’s distracting on exam day if you’ve never done it).
The drills you must own by the end of Week 4:
# etcd snapshot + restore: almost guaranteed on the exam
ETCDCTL_API=3 etcdctl snapshot save /opt/snapshot.db \
--endpoints=https://127.0.0.1:2379 \
--cacert=/etc/kubernetes/pki/etcd/ca.crt \
--cert=/etc/kubernetes/pki/etcd/server.crt \
--key=/etc/kubernetes/pki/etcd/server.key
ETCDCTL_API=3 etcdctl snapshot restore /opt/snapshot.db \
--data-dir=/var/lib/etcd-restoredFor a step-by-step walkthrough see our etcd backup and restore guide.
The Top 7 CKA Practice Mistakes
After watching hundreds of CKA candidates train, the same mistakes show up over and over.
- Practicing only with
kubectl create -f file.yaml. The real exam rewards imperative speed. Learnkubectl run,kubectl create, and--dry-run=client -o yamluntil they’re reflex. - Skipping the
kubectl explaincommand. It’s your offline-friendly schema lookup. Use it instead of grepping the docs for trivial fields. - Practicing on a managed cluster (EKS/GKE) only. You’ll see kubeadm, static pods, and
/etc/kubernetespaths on the exam, managed clusters hide all of that. - Ignoring context switching. The exam jumps between clusters. Practice
kubectl config use-contextand read every task’s first line carefully. - Memorizing YAML. You can’t. Memorize the generators, not the YAML.
- No timed practice. If you’ve never done a 2‑hour timed run, your first one will be a disaster. Do at least three before exam day.
- Not setting aliases. Every second matters. The first thing to type on exam start:
alias k=kubectl
export do="--dry-run=client -o yaml"
export now="--grace-period=0 --force"
source <(kubectl completion bash)
complete -F __start_kubectl kFree vs. Premium CKA Prep: How They Compare
| Feature | Free Stack (incl. CK-X) | Premium Mock Bundles |
|---|---|---|
| Real Kubernetes clusters | Yes | Yes |
| PSI-style exam UI | Yes (CK-X) | Yes |
| Number of full-length mocks | 1–2 (CK-X) | 5–10 (curated, exam-mapped) |
| Question difficulty curve | Mixed | Calibrated to current exam difficulty |
| Domain-by-domain analytics | Basic | Per-domain weak-spot reports |
| Updates for exam version changes | Community-driven | Maintained by exam-prep team |
| Cost | $0 | One-time fee |
The honest read: the free stack is enough to pass. Premium mock bundles are where you go when you want a calibrated difficulty curve, more reps, and per-domain analytics that tell you exactly where you’re losing points. Many candidates start free with CK-X and only upgrade in the final 2 weeks before their exam date, see the CKA exam-ready mock exam bundle if that’s where you land.
A Hands-On Practice Strategy That Actually Works
Hands-on practice fails when it’s unstructured. Use this loop:
- Pick one micro-topic. “NetworkPolicy egress rules.” Not “networking.”
- Build it from memory. No copy-paste.
- Break it on purpose. Delete a label, change a port, swap a selector.
- Diagnose without
describefirst. Read events withkubectl get events --sort-by=.metadata.creationTimestampand logs first. Usedescribelast. - Repeat in 24 hours. Spaced repetition isn’t optional for muscle memory.
How to Run Your First Free CKA Mock Exam Today
Here’s the fastest path from zero to a real timed CKA mock:
# 1. Clone CK-X
git clone https://github.com/sailor-sh/CK-X.git
cd CK-X
# 2. Spin it up (Docker required)
docker compose up -d
# 3. Open your browser
open http://localhost:3000
# 4. Pick "CKA" track and start a timed examWithin 5 minutes you’ll be sitting in front of a remote desktop and terminal that look uncomfortably similar to what you’ll see on exam day. That’s the point.
If you’d rather try the hosted version of the simulator without installing anything, head to sailor.sh and start a free CKA practice session.
CKA Practice CTA: Where to Go Next
- Free, today: Try CK-X and run one full 2‑hour timed mock.
- Sharpen weak spots: Read our CKA exam preparation guide, CKA troubleshooting guide, and kubectl cheat sheet.
- Final 2 weeks before exam: Consider the CKA exam-ready mock exam bundle for calibrated difficulty and per-domain analytics.
Frequently Asked Questions
Can I really pass the CKA using only free resources?
Yes. The CKA is a hands-on exam, and the free stack. CK-X simulator, a local kind/k3d cluster, and the official Kubernetes docs, is enough to build the muscle memory you need. What free resources don’t always give you is a calibrated difficulty curve and per-domain analytics. If you’ve done 3+ full timed mocks and you’re scoring 75%+, you’re ready.
How many hours of practice do I need before the CKA?
Most candidates who pass on the first attempt put in 80–120 hours of hands-on practice. If you’re new to Kubernetes, plan for 150+ hours. Spread across 6–8 weeks at ~2 hours/day is the sweet spot for retention.
Is CK-X really free?
Yes. CK-X is open source under the Apache-2.0 license. You can self-host it locally with Docker, fork it, or use the hosted version on sailor.sh for free.
How is CK-X different from killer.sh?
killer.sh is included with your exam voucher and gives you 2 sessions (36 hours each). CK-X is unlimited, free, open source, and self-hostable. Many candidates use both: CK-X for ongoing daily practice, killer.sh for the final dress rehearsal once their exam is scheduled.
What’s the single most important kubectl flag for the CKA?
--dry-run=client -o yaml. It turns any imperative command into a starter manifest. Combined with kubectl explain, it covers 80% of the YAML you’ll need to write under time pressure.
Should I take CKA or CKAD first?
If you come from an ops, infrastructure, or platform background, take CKA first. If you come from a developer or application background, CKAD is the gentler entry point. See our breakdown: CKA vs CKAD vs CKS, which certification first?.
Can I practice CKA on a Mac?
Yes. CK-X runs fine on Apple Silicon and Intel Macs via Docker Desktop or OrbStack. kind and k3d both have native arm64 builds.
Will the free practice still be relevant after the next CKA exam update?
The CKA curriculum has been stable for the last several revisions. The 2025–2026 updates were largely additive (gateway API exposure, etc.). For the latest changes see CKA exam changes 2025–2026.
The shortcut nobody tells you: the people who pass the CKA aren’t the ones who watched the most videos. They’re the ones who logged the most hours in front of a real terminal under a real timer. Free tools have closed the gap. Now it’s just a question of putting in the reps.
Ready to Lock In Your CKA Pass?
When you’ve outgrown free practice and want calibrated, exam-mapped mock exams with per-domain analytics, the Sailor.sh CKA bundle is built for the final 2 weeks before exam day:
→ Certified Kubernetes Administrator (CKA) Exam-Ready Mock Exam Bundle
Going for all three Kubernetes certifications? The matching bundles:
Same CK-X engine you’ve been practicing on, calibrated difficulty curve, per-domain weak-spot reports.