CKA vs CKAD
Both are hands-on exams in a live cluster with a two-hour clock and no multiple choice. The difference is which side of the cluster you work on.
CKA is for the people who run Kubernetes. CKAD is for the people who deploy onto it. Choosing wrongly means spending months on skills your job will never ask for.
Side by side
| CKA | CKAD | |
|---|---|---|
| Exam cost | $445, one free retake included. | $445, one free retake included. |
| Experience assumed | Cluster operation, Linux administration and networking. | Container application development and deployment. |
| Format | Performance-based in a live cluster, 2 hours. | Performance-based in a live cluster, 2 hours. |
| Passing score | 66%. | 66%. |
| What it tests | Installation, upgrades, etcd backup, RBAC, troubleshooting nodes. | Pod design, configuration, observability, services, deployments. |
| Study time | Eight to twelve weeks with daily cluster practice. | Six to ten weeks with daily cluster practice. |
| Difficulty | Harder. Cluster failures must be diagnosed under time pressure. | Slightly gentler scope, same time pressure. |
| Typical roles | Platform engineer, SRE, infrastructure engineer. | Backend developer, application engineer deploying to Kubernetes. |
| Renewal | Two years. | Two years. |
Which one to take first
Take CKA if you are responsible for the cluster: upgrades, node health, etcd, RBAC, and the phone call when nothing schedules. It is the harder exam and the one that covers CKAD's material incidentally.
Take CKAD if you ship applications onto a cluster somebody else runs. Manifest authoring, probes, config and secrets are your daily work, and CKA will spend weeks teaching you cluster surgery you will never perform.
Speed is the shared constraint. Both exams fail people who know the material but cannot type it fast enough. Set the kubectl alias, learn the imperative generators, and practise against a clock rather than against a book.
When the answer is the other one
Take CKAD instead if you are a developer
CKA spends a third of its weight on installation, upgrades and etcd recovery. If nobody will ever ask you to do those, that is a third of a $445 exam and a month of study aimed at somebody else's job. CKAD covers what you actually touch.
Take KCNA instead if Kubernetes is new
Both of these assume you already run containers comfortably. KCNA is multiple choice, considerably cheaper, and builds the vocabulary that makes CKA or CKAD study tractable rather than bewildering.
Take CKS afterwards, never instead
The security specialist requires an active CKA before you may sit it, so it is never an alternative to these two. It is the step after CKA for people whose work is cluster hardening.
The short version
You run the cluster: CKA. You deploy onto it: CKAD.
Neither is a stepping stone to the other. They are two jobs, and the certifications match them.
Frequently asked questions
Is CKA harder than CKAD?
Generally yes. CKA covers cluster installation, upgrades and troubleshooting under the same two-hour clock, and diagnosing a broken node is harder than authoring a manifest.
Do I need CKA before CKS?
Yes. An active CKA is required before you may sit the Certified Kubernetes Security Specialist exam. CKAD does not satisfy it.
Are these open book?
You may use the official Kubernetes documentation during the exam. That is why speed matters more than memorisation: everyone has the docs, and only some people can navigate them fast enough.
Answer a few from each.
Free sample questions for both, with the full explanation on every answer. Nothing tells you which exam suits you like sitting a few of its questions.