KCNA and KCSA are two separate CNCF certification exams, not a documented discounted bundle. KCNA covers Kubernetes and cloud-native foundations; KCSA focuses on cloud-native security, especially Kubernetes security. Each exam is listed at $250 in the US and includes one free retake, so taking both costs $500 at the listed prices before any regional pricing, taxes, or discounts. You do not have to take KCNA first according to CNCF’s published pages.
What are KCNA and KCSA?
KCNA: broad Kubernetes and cloud-native foundations
The Kubernetes and Cloud Native Associate (KCNA) is a foundational credential covering Kubernetes concepts and the wider cloud-native ecosystem. CNCF describes it as demonstrating foundational knowledge and skills, including basic kubectl use, containers, pods, nodes, clusters, Kubernetes architecture, cloud-native projects, and security principles. See the official KCNA page.
KCSA: a foundation in cloud-native security
The Kubernetes and Cloud Native Security Associate (KCSA) centers on security practices and controls for cloud-native environments, particularly Kubernetes. Its scope includes cluster configuration, security monitoring, compliance, and identifying risk. CNCF frames it as a foundation for cloud-native security specialization. See the official KCSA page.
KCNA vs. KCSA: how the exams compare
| Comparison | KCNA | KCSA |
|---|---|---|
| Main focus | Kubernetes and cloud-native foundations | Cloud-native and Kubernetes security foundations |
| Largest exam domain | Kubernetes Fundamentals — 44% | Kubernetes Cluster Component Security and Kubernetes Security Fundamentals — 22% each |
| Exam format | Online, proctored, multiple choice | Online, proctored, multiple choice |
| Listed US exam fee | $250, including one free retake | $250, including one free retake |
| Official study resource | Open curriculum and exam resources | Open curriculum and exam resources |
The published exam domains show the difference in emphasis. KCNA allocates 44% to Kubernetes Fundamentals, 28% to Container Orchestration, 16% to Cloud Native Application Delivery, and 12% to Cloud Native Architecture. KCSA allocates 14% to Overview of Cloud Native Security, 22% to Kubernetes Cluster Component Security, 22% to Kubernetes Security Fundamentals, 16% to Kubernetes Threat Model, 16% to Platform Security, and 10% to Compliance and Security Frameworks. Weights are from CNCF’s current KCNA and KCSA pages.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
Does it make sense to take both?
Taking both can make sense if you want broad cloud-native literacy alongside a security foundation. KCNA is the broader starting point; KCSA is the more focused choice for someone whose goal is Kubernetes and cloud-native security. They are complementary, but the published certification pages do not say that KCNA is a prerequisite for KCSA. CNCF’s certification overview presents them as distinct credentials.
If you only need one credential, choose according to the knowledge you want to demonstrate: platform and ecosystem fundamentals point toward KCNA, while security controls, threat modeling, and compliance point toward KCSA. The two registrations are separate rather than a stated combined package.
How much do the two certifications cost?
At the US prices currently listed on the official pages, the arithmetic is $250 for KCNA plus $250 for KCSA, or $500 total. Each listed exam fee includes one free retake. This is the combined cost of two registrations, not an announced bundle price. Check the KCNA and KCSA registration pages for current regional pricing, discounts, taxes, and terms before buying.
How to study for KCNA and KCSA
Use the published domains to prioritize
- For KCNA, begin with Kubernetes Fundamentals. It is the largest domain at 44%. Then study Container Orchestration (28%), Cloud Native Application Delivery (16%), and Cloud Native Architecture (12%). Use the open KCNA curriculum and exam resources as your syllabus.
- For KCSA, start with Kubernetes security foundations. Kubernetes Cluster Component Security and Kubernetes Security Fundamentals are 22% each. Next cover Kubernetes Threat Model and Platform Security (16% each), then Overview of Cloud Native Security (14%) and Compliance and Security Frameworks (10%). Use the open KCSA curriculum and exam resources.
- Use secondary material to supplement, not replace, the official scope. CNCF community preparation articles offer additional learner perspectives for KCNA and KCSA. When their exam-format or weighting details differ, use the current official certification page.
CNCF’s training page includes a learner testimonial mentioning Linux Foundation/Killer.sh and KodeKloud materials. That account does not establish that a course is currently available, officially endorsed, or included with an exam. Compare any paid course with the free curricula and verify its present scope and price directly on the CNCF training page or provider’s site.
How long are the certifications valid?
CNCF announced that KCNA and KCSA certification periods changed from 36 months to 24 months effective April 1, 2024. Check the current handbook and registration terms for the exact maintenance requirements that apply to your exam. Details are in CNCF’s March 1, 2024 announcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the registration figures do—and do not—show
CNCF’s 2025 annual report records 31,000 KCNA registrations, up 72% from 2024, and 10,000 KCSA registrations, up 90% from 2024. These are CNCF-reported registration counts for 2025; they are not pass rates, counts of active certificate holders, or evidence of employment outcomes. See the CNCF Annual Report 2025.
Quick Recap
Best Value
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
