KCNA vs KCSA vs CKA vs CKAD vs CKS: Which Kubernetes Certification Should You Get?

This page compares the five most common CNCF Kubernetes certifications: KCNA, KCSA, CKA, CKAD, and CKS. The goal is simple: help you choose the best next step based on your role and the skills employers expect. All exams are available through Linux Foundation Training & Certification.

Quick comparison table#

Choose by role#

CNCF does not rank these exams. Match the cert to the work you already do, or to the work you want next. The map below follows official exam focus (cluster admin, app delivery, security) and a telecom reading for teams that run Kubernetes under CNFs or carrier platforms.

Telecom#

If you operate telco Kubernetes (CNF platforms, 5G or edge sites, or shared clusters for network functions), start with CKA. It matches cluster install, networking, and troubleshooting. Add CKAD if you package and ship network functions as workloads. Plan CKS only after CKA if you own hardening in production. KCNA is useful when the wider team needs a shared baseline.

Platform#

Platform engineering, SRE, and cluster administration map to CKA. Keep CKS for when security is part of the platform job. Skip KCNA if you already run clusters weekly.

Security#

KCSA covers security concepts with no prerequisite. CKS is the hands-on security exam. CNCF and the Linux Foundation require a passed CKA before CKS, so the security path is KCSA (optional) to CKA to CKS.

Developer#

Application engineers who deploy and maintain workloads should start with CKAD. Use KCNA only if Kubernetes primitives are still new. Take CKA later if you also operate the cluster, not because it sits above CKAD.

If this comparison is a step toward a real cluster or platform project, review consulting services.

How to choose (simple decision rules)#

• If you're new: start with KCNA.
• If you run clusters: start with CKA.
• If you ship apps on Kubernetes: start with CKAD.
• If security is your direction: plan for CKS (but pass CKA first); KCSA can help build the foundations.

Common "future-proof" paths#

• Platform engineer path: KCNA (optional) → CKA → CKS
• Developer path: KCNA (optional) → CKAD → (CKA later if you operate clusters)
• Security foundations path: KCNA → KCSA → CKA → CKS

Training & certification (Linux Foundation)#

If you want official training and exam bundles, reference: Linux Foundation Training & Certification. If you're aiming for a broad "all-rounder" credential stack, the Linux Foundation Kubestronaut bundle groups these five exams at a significant discount.

FAQ#

Is CKS harder than CKA?#

CKS is security-focused and requires you to have passed CKA first. In practice, most candidates find CKS harder because you must combine Kubernetes skills with security problem-solving under time pressure.

Do employers care about KCNA?#

KCNA can help if you're early-career, switching domains, or need a credential to validate fundamentals. For senior roles, hands-on certs (CKA/CKAD/CKS) usually carry more weight.

Where can I register for these exams?#

All CNCF Kubernetes certifications are administered through Linux Foundation Training & Certification, which also offers training courses and exam bundles.

Sources#

• CNCF Cloud Native Certifications
• KCNA (CNCF) — exam overview + domain weights
• KCSA (CNCF) — exam overview + domain weights
• CKA (CNCF) — exam overview + domain weights
• CKAD (CNCF) — exam overview + domain weights
• CKS (CNCF) — prerequisite + domain weights
• Linux Foundation FAQ (CKA/CKAD/CKS)
• Linux Foundation Kubestronaut bundle