If the CKA is about running the cluster, the CKAD is about running applications on the cluster, fast. The exam expects you to deploy, debug, and reshape workloads under a 2‑hour timer. There are no multiple-choice questions, no theory, no partial credit for “I know what I’d do.” Either the manifest applies cleanly and the validator passes, or it doesn’t.
The good news for developers: you don’t need a paid course or a cloud-lab subscription to get there. Here’s the exact free playbook, including the open-source CK-X simulator, realistic exam scenarios, a 21-day study plan, and the speed drills that separate passers from re-takers.
The CKAD Exam at a Glance
The CKAD is shorter than the CKA, but the time pressure is sharper. Application-developer tasks cluster more tightly together, and the validator doesn’t care about partial work.
| Attribute | CKAD Exam Reality |
|---|---|
| Format | Performance-based on a live cluster |
| Duration | 2 hours |
| Number of tasks | 15–20 hands-on scenarios |
| Passing score | 66% |
| Allowed tabs | kubernetes.io/docs and a few sub-domains |
| Environment | PSI Secure Browser with remote desktop + terminal |
| Retake | One free retake within 12 months |
| Validity | 2 years |
The trap that catches most developers: the CKAD doesn’t just test what you’d write in production. It tests how fast you can produce correct YAML under stress. That’s a different skill than “can use Kubernetes.”
What the CKAD Actually Tests
The current CKAD curriculum weights look like this:
| Domain | Weight |
|---|---|
| Application Design and Build | 20% |
| Application Deployment | 20% |
| Application Observability and Maintenance | 15% |
| Application Environment, Configuration and Security | 25% |
| Services and Networking | 20% |
Notice what’s not on the list: cluster install, kubeadm upgrades, etcd backup. CKAD lives one layer up. If you’ve already done CKA prep, the cluster work is “free”, but you still need to drill the developer-side patterns hard. If CKAD is your first cert, see our CKA vs CKAD comparison.
Free Resources That Actually Move the Needle
Skip the bottomless lists of “100 free CKAD resources.” Here’s the short list that actually produces pass results.
1. CK-X: Free, Open-Source CKAD Simulator
CK-X is the free Kubernetes exam simulator we built specifically because there was no free option that matched the PSI exam UI. It has a CKAD-specific track with the patterns you actually hit on the real exam.
What you get for free:
- Web-based remote desktop + terminal that mirrors PSI
- Real K3D-backed Kubernetes clusters (no toy mocks)
- Timer-based exam mode
- Multi-question navigation (flag, skip, return)
- Automated validation of your live cluster state
- CKAD-specific scenarios: multi-container pods, probes, ConfigMaps/Secrets, Services, Jobs/CronJobs
If you want to see the platform end-to-end before installing anything, this short walkthrough covers it:
2. The Official Kubernetes Documentation
kubernetes.io/docs is the only documentation you can use during the exam. Time spent learning how to navigate it compounds.
CKAD-specific pages to know cold:
/docs/concepts/workloads/pods//docs/concepts/workloads/controllers/job//docs/concepts/configuration/configmap//docs/concepts/configuration/secret//docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes//docs/tasks/inject-data-application/define-environment-variable-container/
3. kind, minikube, or k3d: pick one
You should be running kubectl against a local cluster every single day:
# k3d (what CK-X uses): fastest startup
k3d cluster create ckad-practice --servers 1 --agents 2
# kind: best for multi-node networking practice
kind create cluster --name ckad-practice
# minikube
minikube start --memory=4g --cpus=24. Killercoda’s Free CKAD Scenarios
Killercoda’s free CKAD scenarios are excellent for drilling individual topics in the browser. They won’t replace a full timed mock, but they’re great for 15-minute focused reps during a workday.
A Free 21-Day CKAD Study Plan
The CKAD is doable in 3 weeks if you have prior Kubernetes exposure. Plan for 4–6 weeks if you’re starting cold. This is the 21-day version assuming ~1.5 hours/day on weekdays and ~3 hours on weekends.
| Week | Focus | Daily Practice |
|---|---|---|
| Week 1 | Pods, deployments, ConfigMaps, Secrets | Imperative creation, env vars, volume mounts |
| Week 2 | Multi-container, probes, Jobs, observability | Sidecars, init containers, livenessProbe, Jobs/CronJobs |
| Week 3 | Services, networking, security, full mocks | NetworkPolicy, SecurityContext, 2 timed mock exams |
Week 1: Build the imperative reflex
By the end of Week 1 you should be able to produce these in under 30 seconds each, without notes:
# A pod with a label and a single env var
k run web --image=nginx --labels=app=web --env=ENV=prod \
--dry-run=client -o yaml > pod.yaml
# A deployment with replicas
k create deploy api --image=myimg:1.0 --replicas=4 \
--dry-run=client -o yaml > deploy.yaml
# A ConfigMap from literals and a file
k create cm app-config --from-literal=LOG_LEVEL=info \
--from-file=./settings.json
# A Secret from a literal
k create secret generic db-creds \
--from-literal=username=app --from-literal=password=s3cr3t
# A Service exposing a deployment
k expose deploy api --port=80 --target-port=8080 --type=ClusterIPFor more on configuration patterns see our CKAD ConfigMaps & Secrets guide.
Week 2: Multi-container, probes, observability
Multi-container pod patterns (sidecar, ambassador, adapter) show up on almost every CKAD attempt. Drill these explicitly. Our multi-container pod patterns guide covers each one with annotated YAML.
Probes are also high-yield. You should be able to write all three from memory:
livenessProbe:
httpGet:
path: /healthz
port: 8080
initialDelaySeconds: 5
periodSeconds: 10
readinessProbe:
exec:
command: ["cat", "/tmp/ready"]
periodSeconds: 5
startupProbe:
tcpSocket:
port: 8080
failureThreshold: 30
periodSeconds: 10For the deeper exam-mapped breakdown see Liveness, Readiness, and Startup Probes.
Jobs and CronJobs are easy points if you’ve practiced them; easy to fail if you haven’t. See Jobs and CronJobs guide.
Week 3: Services, networking, security, full mocks
By Week 3 you should be doing two full timed mock exams, not just topic drills. Realistic conditions:
- Single 24‑inch monitor (PSI doesn’t allow dual monitors)
- No notes other than
kubernetes.io/docs - Strict 2‑hour timer
- Webcam on (yes, simulate the surveillance)
Topics to drill in the final week:
NetworkPolicyingress and egress rulesSecurityContextat pod level vs container levelServicetypes (ClusterIP, NodePort, LoadBalancer, ExternalName)Ingressrules with path-based routing
# A NetworkPolicy you should be able to type from memory
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: api-allow-frontend
namespace: web
spec:
podSelector:
matchLabels:
app: api
policyTypes: [Ingress]
ingress:
- from:
- podSelector:
matchLabels:
role: frontend
ports:
- protocol: TCP
port: 8080The Top 7 CKAD Practice Mistakes
-
Writing YAML by hand from scratch. Always start with
--dry-run=client -o yaml. Then trim and edit. Hand-typingapiVersionis how you lose 5 minutes per task. -
Forgetting
kubectl explain. It’s your offline schema lookup.kubectl explain pod.spec.containers.lifecycle.preStopbeats grepping the docs. -
Not setting up the alias and shortcuts. First 30 seconds of the exam:
alias k=kubectl export do="--dry-run=client -o yaml" export now="--grace-period=0 --force" source <(kubectl completion bash) complete -F __start_kubectl k -
Skipping context switches. The exam jumps clusters/namespaces between tasks. Read the first line of every task and run
kubectl config use-context …. Skip this and you’ll do correct work in the wrong cluster. -
Treating multi-container pods as exotic. They show up almost every attempt. Drill init containers, sidecars, and shared
emptyDirvolumes until they’re boring. -
Memorizing instead of generating. You can’t memorize every YAML schema. Memorize the generators (
kubectl create job,kubectl create cronjob,kubectl create role). -
No timed practice. Untimed practice teaches you the wrong pace. At least 3 full timed mocks before exam day.
Free vs. Premium CKAD Prep: How They Compare
| Feature | Free Stack (incl. CK-X) | Premium Mock Bundles |
|---|---|---|
| Real Kubernetes clusters | Yes | Yes |
| PSI-style exam UI | Yes (CK-X) | Yes |
| Number of full-length mocks | 1–2 (CK-X) | 5–10 (curated, exam-mapped) |
| Difficulty calibrated to current exam | Mixed | Yes, maintained |
| Per-domain analytics | Basic | Detailed weak-spot reports |
| CKAD-specific question patterns | Solid | Weighted to current exam blueprint |
| Cost | $0 | One-time fee |
Honest read: the free stack is enough to pass. Premium bundles like the CKAD exam-ready mock exam bundle earn their cost in the final 2 weeks before exam day, when calibrated difficulty and per-domain analytics tell you where to spend your last 20 hours.
CKAD Speed Drills: The 10-Minute Daily Habit
The single highest-ROI habit for CKAD prep is a 10-minute daily speed drill. Set a 10‑minute timer. Pick one of these and execute:
- Create a deployment, expose it, and verify with
curlfrom a debug pod. - Mount a ConfigMap as a volume and a Secret as env vars in the same pod.
- Write a NetworkPolicy that isolates a namespace except for ingress from one labeled pod.
- Build a multi-container pod with an init container that waits for a Service, plus a sidecar that tails logs.
- Create a Job that runs to completion, then a CronJob that runs every 5 minutes.
Do one per day for 14 days and your imperative reflexes will be sharper than 90% of test-takers.
How to Run Your First Free CKAD Mock Exam Today
# 1. Clone CK-X
git clone https://github.com/sailor-sh/CK-X.git
cd CK-X
# 2. Spin it up (Docker required)
docker compose up -d
# 3. Open your browser
open http://localhost:3000
# 4. Pick "CKAD" track and start a timed examWithin 5 minutes you’ll be facing a remote desktop and terminal that look uncomfortably like the real PSI exam. Which is exactly the point.
If you’d rather try the hosted version of the simulator without installing anything, head to sailor.sh and start a free CKAD practice session.
CKAD Practice CTA: Where to Go Next
- Free, today: Try CK-X and run one full 2‑hour timed mock.
- Sharpen weak spots: Read our CKAD exam guide 2026, CKAD kubectl cheat sheet, and CKAD application troubleshooting.
- Final 2 weeks before exam: Consider the CKAD exam-ready mock exam bundle for calibrated difficulty and per-domain analytics.
Frequently Asked Questions
Can I really pass the CKAD using only free resources?
Yes. The CKAD is hands-on, and the free stack. CK-X simulator, a local k3d/kind cluster, and the official Kubernetes docs, is enough to build the imperative speed required. Premium mock bundles add calibrated difficulty and per-domain analytics, which matter most in the final 2 weeks before the exam.
How long does it take to prepare for the CKAD?
Most candidates with prior Kubernetes exposure can prepare in 3–4 weeks at ~2 hours/day. Cold starts need 6–8 weeks. The strongest predictor isn’t hours, it’s full timed mocks. Do at least three.
Is CKAD harder than CKA?
CKAD has a tighter time-per-task budget but a narrower domain. Most developers find CKAD easier; most ops folks find CKA easier. See CKAD vs CKA for the full breakdown.
Is CK-X really free?
Yes. CK-X is open source under the Apache‑2.0 license. Self-host it locally with Docker, fork it, or use the hosted version on sailor.sh for free.
How is CK-X different from killer.sh?
killer.sh comes bundled with the exam voucher and gives you 2 sessions of 36 hours each. CK-X is unlimited, free, open source, and self-hostable. Many candidates use both.
What’s the most overlooked CKAD topic?
Probes, specifically the difference between liveness, readiness, and startup probes, and when each one fires. They show up almost every exam and they’re easy points if you’ve practiced them.
Can I take the CKAD on a Mac?
Yes. The exam runs in a PSI Secure Browser that supports macOS. Your local prep on Apple Silicon works fine. Docker Desktop or OrbStack run kind, k3d, and CK-X with no issues.
Do I need to know Helm for CKAD?
The current CKAD blueprint touches package management at a conceptual level. You won’t be asked to write a chart from scratch, but you should know how helm install/upgrade/rollback work and how Helm relates to the underlying manifests.
The shortcut nobody tells you: the developers who pass CKAD on the first attempt aren’t the ones who watched the most courses. They’re the ones who logged the most hours generating manifests under a real timer. Free tools have closed the gap. Now it’s just about putting in the reps.
Ready to Lock In Your CKAD Pass?
When you’ve outgrown free practice and want calibrated, exam-mapped mock exams with per-domain analytics, the Sailor.sh CKAD bundle is built for the final 2 weeks before exam day:
→ Certified Kubernetes Application Developer (CKAD) Exam-Ready Mock Exam Bundle
Going for all three Kubernetes certifications? The matching bundles:
Same CK-X engine you’ve been practicing on, calibrated difficulty curve, per-domain weak-spot reports.