k8s Flashcards
← Back to blog
CKACKADCertificationCareer

CKA vs CKAD: Which Kubernetes Certification Should You Take?

Same exam format, different job lens — application developer vs cluster administrator. How to choose, and what each exam rewards under time pressure.

2 min read

Both CKAD (Certified Kubernetes Application Developer) and CKA (Certified Kubernetes Administrator) are performance-based exams from the CNCF/Linux Foundation. You SSH into real environments and fix things — not multiple choice.

They share the same broad shape (check the official candidate handbook for current details):

  • 15–20 tasks in a 2-hour window
  • 66% to pass
  • Kubernetes v1.35 in current exam environments (version tracks recent releases)
  • kubectl with k alias and docs allowed in a second browser tab
  • Tasks run on designated SSH hosts — you ssh in, work, exit back to base

The difference is what you are allowed to break and what you are expected to fix first.

CKAD: the application lens

Audience: Developers and platform engineers who deploy and debug workloads.

Typical tasks:

  • Fix a Deployment rollout or probe configuration
  • Wire ConfigMaps, Secrets, and environment variables
  • Expose a Service or debug missing Endpoints
  • Create Jobs, CronJobs, or multi-container pods
  • Apply NetworkPolicy or resource requests

Mindset: "My pod is CrashLooping / not Ready / not reachable — what is the manifest or config mistake?"

You rarely touch etcd or kubeadm. You live in namespaces, Deployments, and kubectl describe pod.

CKA: the cluster lens

Audience: Administrators and SREs who operate the cluster itself.

Typical tasks:

  • Troubleshoot NotReady nodes and kubelet issues
  • Work with static control plane pods and cluster networking (CoreDNS, kube-proxy, CNI)
  • Manage PV/PVC lifecycle and storage classes
  • Drain/cordon nodes, understand scheduling constraints at cluster scale
  • Backup/restore etcd, rotate certs, join workers (kubeadm-style operations)

Mindset: "Something is wrong with the platform — where does the failure live: node, control plane, network, or storage?"

Side-by-side

**CKAD****CKA**
Primary questionWhy is **my app** failing?Why is **the cluster** failing?
First tools`describe pod`, `logs`, `get deploy/svc``get nodes`, `describe node`, kube-system pods
YAML vs imperativeBoth — generate with `--dry-run=client -o yaml`Both — plus node-level and static pod paths
Risk profileBad rollout, wrong probeWrong drain, etcd mistake, cert chaos

Many engineers take CKAD first if they deploy apps daily, then CKA when they own nodes and upgrades. Others go straight to CKA if they already administer clusters.

What both exams punish

  1. Random restarts before reading Events
  2. Fixing symptoms (deleting pods) without understanding controllers
  3. Slow navigation — know your kubectl patterns and doc bookmarks
  4. Skipping verification — a task is not done until the cluster agrees

That is why we built Decision Trainer around first-step choices, not isolated syntax flashcards.

How to practice for each

On k8s Flashcards:

  • Seven core topics (Pod Debugging, Services, Rollouts, Scheduling, Config, RBAC, Storage) — operational troubleshooting, included in Decision Trainer Pro
  • CKAD Exam Prep — 100 application-focused scenarios + exam sprints (separate pack)
  • CKA Exam Prep — 100 cluster-admin scenarios + exam sprints (separate pack)

Start with Pod Debugging (free) to nail describe/logs discipline, then pick the cert pack that matches your exam date.

Next: How to Prepare for the CKAD Exam · How to Prepare for the CKA Exam