KCNA or KCSA First? How to Order Your Kubernetes Certifications
Kubernetes is the standard platform for running containers, and the Cloud Native Computing Foundation offers several exams around it. Two associate-level exams are popular with beginners: KCNA and KCSA. They sound similar but test different skills. This guide compares them and shows how to order the exams that come next.
The cloud native associate exams on this site
| Exam | Level | Practice tests | Questions | Per test |
|---|---|---|---|---|
| Kubernetes and Cloud Native Associate (KCNA) | Associate | 5 | 300 | 60 questions, 90 min |
| Kubernetes and Cloud Native Security Associate (KCSA) | Associate | 5 | 300 | 60 questions, 90 min |
| Prometheus Certified Associate (PCA) | Associate | 5 | 300 | 60 questions, 90 min |
| OpenTelemetry Certified Associate (OTCA) | Associate | 5 | 300 | 60 questions, 90 min |
| Certified Argo Project Associate (CAPA) | Associate | 5 | 300 | 60 questions, 90 min |
Figures are for the practice-test sets on this site. Check the provider’s own page for the real exam format.
Number of original practice questions across all tests for each exam on this site.
KCNA: the cloud native foundation
Kubernetes and Cloud Native Associate (KCNA) covers the fundamentals: what Kubernetes is, containers, orchestration and the wider cloud native ecosystem. It is a multiple-choice exam and suits anyone starting with Kubernetes.
KCSA: the security layer
Kubernetes and Cloud Native Security Associate (KCSA) focuses on security for Kubernetes and cloud native environments: threats, platform security and compliance. It assumes you are comfortable with the basics.
KCNA and KCSA side by side
| KCNA | KCSA | |
|---|---|---|
| Main focus | Kubernetes and cloud native fundamentals | Security for Kubernetes and cloud native platforms |
| Best for | Beginners to containers and Kubernetes | People who know the basics and care about security |
| Assumes | Little prior knowledge | Comfort with Kubernetes concepts |
| Good roles | Junior DevOps, cloud and platform roles | Platform, DevSecOps and cloud security roles |
| Natural next step | A security, observability or delivery exam, or a hands-on administrator exam | Deeper security or administrator study |
Which first?
- New to Kubernetes: take KCNA first. It gives you the vocabulary that KCSA builds on.
- Already work with containers and care about security: KCSA can be a good next step, or you can take it second.
- Aiming at DevOps or platform roles: KCNA, then the hands-on certifications from the same foundation.
We have a side-by-side comparison of KCNA and KCSA if you want to see the differences in one place.
- Learn containersWhat a container is and why it exists.
- KCNAKubernetes and cloud native fundamentals.
- Pick a branchSecurity (KCSA), observability (PCA, OTCA) or delivery (CAPA).
- Go hands-onA practical administrator exam from the same foundation.
- ApplyJunior DevOps, platform or SRE roles.
After the associate level
Many learners continue with hands-on exams such as the Certified Kubernetes Administrator, which is a practical exam run by the foundation. Delivery and observability exams from the same ecosystem also help, for example Prometheus PCA, OpenTelemetry OTCA and Argo CAPA.
The Cloud native and DevOps path shows these steps in order, so you can see where each exam fits. For the jobs this leads to, the pay range and the certifications employers mention, see the DevOps and platform engineer role page.
Related on Be Ready Education
Ready to practise?
Original, timed practice tests with every answer option explained. Pick your exam and see exactly what you will get.
Browse practice testsAsk us a questionNot affiliated with, endorsed by or sponsored by any certification vendor or exam body. Certification names, exam codes and product names are trademarks of their respective owners and are used only to identify the exam a practice product prepares for. Our questions are original and are not actual exam questions. Exams and requirements change, so always confirm details on the provider’s official site.
