Walking into an exam without knowing exactly what to expect is stressful. This guide removes that uncertainty by detailing precisely what you’ll encounter on exam day, how questions are structured, time management strategies, and what to expect from the online proctoring experience.
KCNA Exam at a Glance
| Element | Details |
|---|---|
| Total Questions | 60 |
| Question Types | Multiple choice, multiple select, scenario-based |
| Time Allowed | 90 minutes |
| Time Per Question | ~1.5 minutes average |
| Passing Score | 75% (45 out of 60 correct) |
| Questions to Pass | 45 correct |
| Retake Waiting Period | 14 days |
| Exam Cost | $250 |
| Delivery Method | Online, remotely proctored |
| Browser Requirements | Chrome or Firefox (no Safari) |
KCNA Question Types
Question Type 1: Single-Select Multiple Choice
The most common question type on KCNA. You choose one best answer from typically four options.
Example:
Which Kubernetes object defines the desired state and manages Pods through ReplicaSets?
A) Service B) Ingress C) Deployment D) StatefulSet
Answer: C
Strategy:
- Read the question carefully, identify what it’s asking
- Look for keywords (manages, defines, controls, etc.)
- Eliminate obviously wrong answers first
- Choose the best answer, not just “a correct answer”
Question Type 2: Multiple-Select Multiple Choice
You must choose ALL correct answers. This is trickier because selecting incomplete answers is penalized.
Example:
Which of the following are valid Service types in Kubernetes? (Select all that apply)
A) ClusterIP B) NodePort C) LoadBalancer D) NamespaceType E) ExternalName
Answer: A, B, C, E (all except D)
Strategy:
- Read carefully—you need to select ALL correct answers
- If you’re unsure about one option, be cautious
- Mark these questions for review; return to them if uncertain
- Better to be conservative than guess incorrectly
Question Type 3: Scenario-Based Questions
These present a situation and ask what would happen or what you should do.
Example:
A Production Deployment has 5 replicas running. A node fails, causing all Pods on that node to terminate. Assuming no resource constraints, what will happen to the Deployment?
A) The Deployment will remain at 4 replicas until manually scaled B) The Deployment will automatically scale to 5 replicas on remaining nodes C) The Deployment will enter a failed state D) Nothing—the Pods are already gone
Answer: B
Strategy:
- Understand the scenario completely before looking at answers
- Think about what Kubernetes does automatically (self-healing)
- Avoid assumptions not stated in the question
- Consider the principle: “Kubernetes maintains desired state”
Question Type 4: True/False or Concept Statements
Less common but present. Evaluate whether a statement is accurate.
Example:
True or False: A Pod can contain multiple containers that share the same network namespace and communicate via localhost.
A) True B) False
Answer: A (True)
Strategy:
- Read the entire statement carefully
- Watch for absolutist language (“always,” “never”)
- One exception makes an absolute statement false
- Concept-based, requires understanding not memorization
Question Distribution by Domain
The KCNA tests five domains with specific weightings. Knowing this helps you understand question emphasis:
| Domain | Questions | Percentage |
|---|---|---|
| Kubernetes Fundamentals | 28 | 46% |
| Container Orchestration | 13 | 22% |
| Cloud Native Architecture | 10 | 16% |
| Cloud Native Observability | 5 | 8% |
| Cloud Native Application Delivery | 4 | 8% |
You’ll encounter roughly:
- 28 questions on core Kubernetes objects, networking, storage, RBAC
- 13 questions on scaling, updates, scheduling, health checks
- 10 questions on microservices, serverless, security, application design
- 5 questions on logging, monitoring, tracing
- 4 questions on CI/CD, GitOps, deployment strategies
The Difficulty Curve
KCNA questions are calibrated to the 75% passing score difficulty. Distribution:
| Difficulty | Percentage | Questions |
|---|---|---|
| Easy | 30% | 18 questions |
| Medium | 50% | 30 questions |
| Hard | 20% | 12 questions |
What “hard” means for KCNA:
- Trick wording or reading comprehension challenges
- Requires connecting multiple concepts
- Tests edge cases or uncommon scenarios
- Multiple-select where all four options seem partially correct
- Requires deeper understanding, not surface knowledge
Easy questions let you build confidence and points. Medium questions determine most passing candidates. Hard questions separate those who deeply understand from those who memorized.
Time Management Strategy
You have 90 minutes for 60 questions = 1.5 minutes per question average. This is tight but manageable.
Recommended Time Allocation
Phase 1: First Pass (60 minutes)
- Answer all questions you’re confident about
- Skip difficult or unclear questions
- Mark uncertain questions for review
- Aim to complete 50 questions with high confidence
- Don’t spend more than 1 minute on each question in this phase
Phase 2: Review Uncertain (20 minutes)
- Return to marked questions
- Use context from other questions you answered
- Make educated guesses where needed
- Don’t overthink—your first instinct often correct
Phase 3: Final Check (10 minutes)
- Quick scan of all answers
- Fix obvious errors (misread questions)
- Submit when confident
Time Management Tips
Tip 1: Don’t Get Stuck If a question is confusing, move on. You have time to return. Spending 3 minutes on one question costs you because you’re down to 1 minute per question for remaining items.
Tip 2: Read Carefully (But Not Slowly)
- Read the entire question before looking at answers
- Identify the key constraint or condition
- Watch for “NOT,” “EXCEPT,” “MOST LIKELY,” etc.
- This takes 20-30 seconds but prevents misreading
- Spending 30 seconds reading saves you from wrong answers
Tip 3: Multiple-Select Caution Multiple-select questions take slightly longer because you must evaluate each option. Budget 2 minutes for these.
Tip 4: Scenario Questions Are Valuable These test deep understanding. Take 2 minutes to understand the scenario fully, but they’re worth the time because you’ll likely know the answer once scenario is clear.
Tip 5: Use Flag Feature Most testing platforms let you flag questions. Use this!
- Flag questions you’re unsure about
- Flag multiple-select questions to return to
- Don’t re-answer flagged questions unless necessary
Tip 6: Mental Breaks If stuck on a question, take a quick 5-second mental break. Close your eyes, breathe, then move on. Stress narrows thinking.
Sample KCNA Questions Walkthrough
Let’s walk through realistic KCNA questions with explanation:
Sample Question 1: Single-Select
Question:
You deploy a Deployment with 3 replicas. You notice that after a Node failure, the Deployment still shows 3 replicas. However, you can only see 1 Pod running. What is the MOST LIKELY cause?
A) The Deployment was not properly configured B) Kubernetes automatically recovered the lost Pods on other nodes C) The remaining Pods are in Pending state because resources are exhausted D) The node will automatically restart and recover the Pods
Answer Analysis:
- Why B is correct: When a node fails, the Deployment controller detects the loss and creates replacement Pods on remaining nodes. This is self-healing, a core Kubernetes feature.
- Why A is wrong: Deployment configuration isn’t the issue; self-healing would still work
- Why C is possible: Pending state is possible, but the question asks MOST LIKELY. If you can see only 1 Pod running (not 3 Pending), this is less likely
- Why D is wrong: Nodes don’t automatically recover; replacement Pods are created elsewhere
Time: 1-2 minutes
Lesson: Understand Kubernetes self-healing behavior. This is tested frequently.
Sample Question 2: Multiple-Select
Question:
Which of the following are methods to expose a Kubernetes Service outside the cluster? (Select ALL that apply)
A) Using NodePort service type B) Using LoadBalancer service type C) Using ClusterIP service type D) Using Ingress E) Using External IP in a Service spec
Answer: A, B, D, E (all except C)
Analysis:
- A) ✓ NodePort exposes on node IP:port
- B) ✓ LoadBalancer creates external load balancer
- C) ✗ ClusterIP is internal only
- D) ✓ Ingress is for HTTP/HTTPS external exposure
- E) ✓ ExternalIP can expose the service externally
Why this is hard:
- Multiple options are partially correct
- ClusterIP is a real service type but not for external exposure
- ExternalIP is less commonly used but valid
Strategy:
- Understand each service type’s purpose
- For multiple-select, don’t select unless completely certain
- If unsure about E, you might skip it—but it IS correct
Time: 2-3 minutes
Lesson: Multiple-select requires confidence. Know service types thoroughly.
Sample Question 3: Scenario-Based
Question:
Your team has a microservices application with separate teams owning different services. You want to isolate these services so that team A’s Pods cannot directly communicate with team B’s Pods without going through an API gateway. What Kubernetes feature should you use?
A) Namespaces B) Network Policies C) RBAC D) Service Mesh
Answer: B
Analysis:
- Why B is correct: Network Policies restrict Pod-to-Pod communication. This directly solves the isolation need.
- Why A is wrong: Namespaces are for organization/isolation but don’t restrict network communication
- Why C is wrong: RBAC controls who can do what (authorization), not traffic flow
- Why D is close but wrong: Service Mesh can do this, but it’s overkill for the basic scenario. Network Policy is the direct answer.
Why this is hard:
- Multiple features could theoretically solve it
- Requires understanding what each feature does
- D) is tempting if you’ve learned about Service Mesh
Strategy:
- Read the constraint carefully: “cannot directly communicate”
- This is a network constraint, not a permission constraint
- Network Policies directly match network constraints
Time: 2 minutes
Lesson: Map constraints to features. “Cannot communicate” = Network Policy.
Sample Question 4: Concept Understanding
Question:
True or False: When a Pod is created with a resource request of 500m CPU, Kubernetes guarantees that the Pod will receive at least 500m CPU at all times.
A) True B) False
Answer: B (False)
Explanation:
- Requests set the minimum resource Kubernetes needs to schedule the Pod
- Requests do NOT guarantee the Pod gets those resources at all times
- If the node is busy, the Pod might get less CPU (up to its limit, if set)
- Limits are the maximum; Requests are the reservation needed for scheduling
Why this is tricky:
- Requests and limits are easily confused
- The question uses specific language: “at all times”
- Understanding requires nuanced knowledge
Lesson: Understand resource request vs limit distinction thoroughly.
Online Proctoring Experience
KCNA exams are delivered remotely with Examity proctoring. Here’s what to expect:
Before the Exam
System Requirements Check:
- Test your computer, camera, and microphone
- Use Chrome or Firefox (not Safari)
- Check internet speed (20 Mbps recommended)
- Close all applications
- Disable VPN if you have one
Exam Environment:
- You need a quiet, private room
- Clear desk with only computer (no books, notes, phone)
- Good lighting so proctor can see you
- Headphones not allowed (proctor needs to hear you)
Login Window:
- Log in 15 minutes before exam start
- Complete identity verification (photo ID required)
- Answer questions about your environment
- Proctor may ask you to show desk, room, etc.
During the Exam
Proctor Oversight:
- Proctor monitors via webcam throughout exam
- Proctor can see your screen (exam questions only)
- Proctor can hear you (don’t talk to yourself excessively)
- Can’t look away from screen for extended periods
- Can’t have anyone else in the room
What You CAN Do:
- Take notes on scratch paper (provided by proctor at start)
- Use the browser’s built-in calculator
- Drink water from a cup at desk
- Take bathroom breaks (clock keeps running)
What You CANNOT Do:
- Use external calculator or reference materials
- Have phone visible on desk
- Look at other monitors
- Talk to anyone
- Cover your camera or microphone
- Use copy/paste shortcuts
- Take screenshots (exam platform prevents this)
Behavior Standards:
- Reasonable eye movement is normal
- Quick glances down at paper are okay
- Extended head turns look like cheating
- Excessive typing after question seems suspicious
- Stay in frame for whole exam
Technical Issues
If Connection Drops:
- Proctor may reconnect you
- Exam time continues—you don’t get extra time
- Notify proctor immediately
- Internet stability is your responsibility
If You Have Question About Exam:
- Raise hand (virtual button in platform)
- Proctor will respond via chat
- Clarifications are usually provided for ambiguous questions
- Some test takers report getting clarifications during exam
Passing Score and Results
How Scoring Works
Raw Score: Number of questions correct out of 60
Scaled Score: Raw score converted to 0-100 scale
- Raw score of 45/60 = Scaled score of 75
- 46/60 = ~76.67
- 50/60 = ~83.33
- 60/60 = 100
Passing Requirement: Scaled score of 75 or higher (45+ correct answers)
When You Get Results
Immediate: You receive pass/fail before leaving exam
- Proctor provides feedback immediately after completion
- Know within seconds if you passed
Detailed Results: Within 24-48 hours
- Receive breakdown by domain
- Shows which domains you struggled with
- Useful for planning retake or CKA prep
Certificate: If you passed
- Certificate issued immediately (digital)
- Can download from Linux Foundation account
- Valid for 3 years
Example Result Breakdown:
- Kubernetes Fundamentals: 25/28 (89%)
- Container Orchestration: 11/13 (85%)
- Cloud Native Architecture: 8/10 (80%)
- Observability: 4/5 (80%)
- Application Delivery: 3/4 (75%)
- Total: 51/60 (85%) - PASSED
Retake Policy
Failed the exam? You can retake it, but there are rules:
Retake Rules
- Waiting period: Must wait minimum 14 days before retaking
- Cost: Each attempt costs full $250 exam fee (no discounts)
- No limit: Can retake unlimited times (though each costs $250)
- Score reset: Previous scores don’t matter; new attempt is fresh
Strategic Retake Approach
If You Failed:
- Get your detailed results breakdown (shows weak domains)
- Review weak domains thoroughly
- Take practice tests focused on weak areas
- Schedule retake 14 days out
- Don’t retake immediately—give yourself time to improve
Success Rate on Retake: ~70%+ of people pass on second attempt with targeted studying. Why? Because you now know what topics to focus on.
Sample Exam Walkthrough: Time Management in Action
Let’s simulate a real 90-minute exam with time management:
Minute 0-2: Login and proctor verification Minute 2-3: Read exam instructions (skim quickly) Minute 3-5: Settle in, take a breath
Minute 5-65 (60 minutes): FIRST PASS
- Question 1-20: ~20 min (medium pace)
- Question 21-40: ~20 min (faster on easy, slower on hard)
- Question 41-60: ~20 min (completing survey)
- Outcome: 50 questions answered, 10 marked for review
Minute 65-85 (20 minutes): REVIEW PHASE
- Return to 10 flagged questions
- Use context from previous answers
- Change answers where confident in improvement
- Time: ~2 minutes per question
Minute 85-90 (5 minutes): FINAL CHECK
- Quick scan of all answers
- Fix obvious errors (misread negations, accidental clicks)
- Submit with 30 seconds to spare
Total time used: 87 minutes Time buffer: 3 minutes (safety margin)
Tips for Test Day Success
The Night Before
- Review key concepts (don’t cram)
- Get good sleep (critical!)
- Test your equipment one more time
- Plan your setup—clear desk, good lighting
Morning Of
- Eat a good breakfast (fuel for 90 minutes)
- Use the bathroom before login
- Test internet speed
- Log in early to avoid stress
During Exam
- Read each question completely
- Don’t rush; you have time
- Skip hard questions, return later
- Mark questions you’re unsure about
- Breathe between questions
- Track time mentally (check clock every 15 questions)
Mindset
- 75% is the goal—you don’t need 100%
- 45 out of 60 correct is sufficient
- Difficult questions are worth same points as easy ones
- Some questions test edge cases—don’t overthink
- You’ve prepared; trust your knowledge
FAQ
Can I write on paper during the exam?
Yes. Proctor provides scratch paper at start of exam. You can use it for notes, calculations, mental maps.
What happens if the power goes out?
The proctor will try to reconnect you. If you can’t reconnect, you forfeit that attempt. This is why stable internet is crucial. Don’t blame the platform—take responsibility for your setup.
Can I ask the proctor for help if I don’t understand a question?
Yes. Raise your virtual hand (button in exam platform). Proctor will respond via chat. They can clarify wording but won’t give answers or hints.
How are multiple-select questions scored?
Usually all-or-nothing: if you select all correct answers AND no wrong answers, you get full points. If you’re missing any correct answer OR include wrong answers, you get zero points.
What if I think a question is wrong or poorly worded?
You can report it immediately after the exam. Linux Foundation reviews complaints and may adjust scoring. But don’t expect changes; they vet questions carefully.
Is the exam curved?
No. Fixed 75% passing score. No curves. Your score is your score.
Can I use the Kubernetes docs during exam?
No. You cannot access external resources. It’s proctored—they monitor your screen and internet access.
How should I pace myself?
Aim for 1 minute per question average, with 20 minutes reserved for review. Don’t stick rigidly to timing—adjust based on difficulty.
What if I finish early?
Use remaining time to review flagged answers. Don’t second-guess answers you were confident about.
Ready to test your knowledge under exam conditions? Take Sailor.sh’s full-length KCNA practice exams to experience the exact format, time pressure, and question styles you’ll encounter. Start practicing now.