What is inside the CKA guide
150 practice questions
Original scenario questions mapped to every exam domain.
Every option explained
Why the answer is right and why each distractor is wrong.
Study plan
A week by week plan weighted by domain, plus a cheat sheet.
Interview questions
The questions employers ask for roles that need this certification.
About the CKA exam
Certified Kubernetes Administrator (CKA) (CKA) is the exam for the Kubernetes (CNCF) Certified Kubernetes Administrator certification. Our guide follows the official exam outline dated October 2026 (curriculum v1.37).
| Duration | 2 hours |
| Format | Hands on tasks in a terminal |
| Kubernetes version | v1.37 |
| Validity | 2 years |
CKA exam domains and weights
| Domain | Weight |
|---|---|
| Cluster Architecture, Installation and Configuration | 25% |
| Workloads and Scheduling | 15% |
| Services and Networking | 20% |
| Storage | 10% |
| Troubleshooting | 30% |
Try 5 free CKA practice questions
Pick an answer to see the correct option and a full explanation.
User jane must be able to get, list and watch Pods in the dev namespace only, and nothing else. Which commands grant exactly this?
Correct answer: B
A Role defines permissions inside one namespace and a RoleBinding grants that Role to a subject in the same namespace. Together they limit jane to read access on Pods in dev.
After a bad image update, Deployment web is failing. kubectl rollout history deployment/web shows revisions 1, 2 and 3, and revision 2 was the last good one. Which command restores it?
Correct answer: D
kubectl rollout undo returns a Deployment to an earlier ReplicaSet template, and –to-revision picks the exact revision.
In namespace shop, Pods labeled app=db must accept TCP 5432 only from Pods labeled app=api in the same namespace. Which NetworkPolicy matches?
Correct answer: A
The policy selects the protected Pods (app=db), turns on Ingress isolation, and allows only traffic from Pods labeled app=api on port 5432.
A StorageClass provisions zonal disks. Pods often fail to schedule because volumes are created in a different zone from where the Pod ends up. Which StorageClass setting fixes this?
Correct answer: C
WaitForFirstConsumer delays provisioning until a Pod using the claim is scheduled, so the volume is created in the Pod’s zone.
kubectl get nodes shows node02 as NotReady. You SSH into node02. What is the best first check?
Correct answer: B
A node reports Ready through its kubelet. A stopped or misconfigured kubelet is the most common cause, and systemctl and journalctl show its state and errors.
Want the full CKA question bank?
The complete CKA study guide covers every exam domain with original questions, an explanation for every option, a four week study plan, a cheat sheet and interview questions. Get the complete guide.
A four week CKA study plan
- Week 1: Cluster architecture and installation (25%)
- Week 2: Workloads, scheduling and storage (25%)
- Week 3: Services and networking (20%)
- Week 4: Troubleshooting (30%) and review
Frequently asked questions
Are these real CKA exam questions?
No. Every question is original and written to the official CKA exam objectives. They match the style and difficulty of the exam without copying exam content.
Is this guide updated for the current CKA exam?
Yes. We review each guide whenever the provider changes the exam outline, and buyers get updated versions free.
How do I get the guide after paying?
You get an instant download link on screen and by email. The guide is a PDF that works on any device.
Can I try it before buying?
Yes. Answer the free practice questions on this page. Each one shows the correct answer and a full explanation, so you can judge the quality before you buy.