Stage 7 · Master
KCNA — Kubernetes & Cloud Native Associate
KCNA Full Mock Exam
60 multiple-choice questions, 90 minutes, scored — the real thing without the pressure.
Exam Format
The KCNA (Kubernetes and Cloud Native Associate) exam is a proctored, multiple-choice exam delivered through PSI. You get 90 minutes to answer 60 questions. The exam is 100% theoretical — no hands-on labs. You need a PSI secure browser installed before the exam.
| Detail | Value |
|---|---|
| Questions | 60 multiple choice |
| Time | 90 minutes |
| Passing score | 67% (40 out of 60) |
| Delivery | Online proctored via PSI |
| Retake policy | 1 free retake within 12 months |
Domain Weights
The KCNA exam covers six domains with different weightings. Kubernetes Fundamentals is by far the largest domain at 46%. Focus your study time proportionally.
| Domain | Weight | Questions (approx) |
|---|---|---|
| Kubernetes Fundamentals | 46% | 28 |
| Container Orchestration | 22% | 13 |
| Cloud Native Architecture | 16% | 10 |
| Application Delivery | 8% | 5 |
| Observability | 8% | 5 |
| Platform Automation | — | Included in above |
Kubernetes Fundamentals (46%) and Container Orchestration (22%) together account for 68% of the exam. Master these two domains and you are very likely to pass.
Sample Questions
Here are representative questions in the style of the KCNA exam. Review each one and make sure you understand why the correct answer is correct.
Answer: etcd is the distributed key-value store that holds all cluster state. It is the single source of truth for the entire cluster. All other components read from and write to etcd through the API server.
Answer: The scheduler (kube-scheduler). It watches for Pods with no node assignment and selects the best node based on resource requests, constraints, and policies.
Answer: A Deployment manages ReplicaSets and provides rollout history. A ReplicaSet ensures a specified number of Pod replicas are running. You should always use Deployments, not ReplicaSets directly.
Answer: Cilium. Cilium uses eBPF (extended Berkeley Packet Filter) to implement networking, security, and observability at the Linux kernel level, without requiring traditional iptables rules.
Answer: A Service Mesh is an infrastructure layer that handles service-to-service communication. It provides observability, traffic management, and security through sidecar proxies (or eBPF) without changing application code.
Time Strategy
- First pass — Answer all questions you know immediately. Do not spend more than 30 seconds on any question.
- Flag and return — Mark uncertain questions and come back after the first pass.
- Eliminate wrong answers — Even if unsure, eliminating two wrong answers gives you a 50% chance.
- Time check — With 90 minutes for 60 questions, you have 1.5 minutes per question. If you are behind pace, skip harder questions.
Scoring and Passing
The passing score is 67%, which means you need 40 out of 60 correct answers. There is no penalty for wrong answers, so never leave a question blank. The exam result is available immediately after submission.
Guess if you do not know the answer. There is no penalty for incorrect answers. An educated guess is always better than leaving a question blank.
Last-Minute Tips
- Read each question carefully — look for words like NOT, EXCEPT, or FIRST.
- Know your acronyms — CNI, CRI, CSI, CNCF, SIG, KEP.
- Understand component interactions — how API server, scheduler, and controller manager work together.
- Review the 4Cs security model — Cloud, Cluster, Container, Code.
- Practice with killer.sh if available with your exam voucher.
Before the exam, test your PSI browser, webcam, and internet connection. Have your ID ready. Close all other applications. The proctor may ask you to show your desk and room via webcam.
Mark this lesson complete to store local progress and unlock a cleaner resume path the next time you visit.