Kubernetes and Cloud Native Security Associate: the honest guide
Everything Linux Foundation / CNCF publishes about KCSA, in one place: what the exam asks, how the domains are weighted, and what it takes to be ready.
This guide page is built from the registry, not written yet.
Everything below comes from KCSA’s published exam data, and every figure links to the vendor page it came from. The researched version, with study plans and the parts nobody publishes, is still being written. This page is not submitted to search engines until it is.
Practise KCSA questions in the meantimeWhat the exam actually asks you to do
Multiple choice and multiple response only. No simulations, no labs, and nothing to configure.
- Multiple choice
- Multiple response
Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. Linux Foundation, KCSA exam details ↗
Domain breakdown and official weightings
From the official published CNCF curriculum. Kubernetes Cluster Component Security is the heaviest domain at 22 percent, followed by Kubernetes Security Fundamentals at 22 percent.
- Overview of Cloud Native Security14%
- Kubernetes Cluster Component Security22%
- Kubernetes Security Fundamentals22%
- Kubernetes Threat Model16%
- Platform Security16%
- Compliance and Security Frameworks10%
What comes after passing
KCSA lasts two years. Renewal means passing the current exam again.
Where people go next
Costs across the full renewal cycle are on the KCSA cost page.
Frequently asked questions
How does KCSA relate to CKS?
KCSA is the multiple choice grounding in Kubernetes security concepts; CKS is the hands-on specialist exam that requires CKA first. KCSA has no prerequisite, which makes it the sensible starting point for security-minded newcomers.
What does the KCSA threat model domain cover?
The attack surfaces the components expose: the API server, etcd, the kubelet, and what privilege escalation and lateral movement look like inside a cluster, at concept level rather than exploit level.
Is KCSA hands-on?
No, sixty multiple choice questions in ninety minutes, like KCNA. The terminal exams in this line are CKA, CKAD and CKS.
Keep reading
KCSA practice questions
Free sample questions with the full explanation on every answer.
KCSA passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is KCSA?
An honest difficulty read from the format, the clock and the weights.
Practise KCSA for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free KCSA questions