Your Kubestronaut study path

Learn the foundations, practise administration and application delivery, then bring those skills together in Kubernetes security.

A suggested learning order. Each guide includes memory hooks, essentials, decisions, traps, active recall and a complete quick review.

What the five exams cover

Kubestronaut is a recognition program, rather than a sixth exam. To qualify, earn KCNA, KCSA, CKA, CKAD and CKS with all five credentials current together. See the CNCF program FAQ for recognition and ongoing maintenance rules.

Exam	Main revision question	Assessment style
KCNA	How do Kubernetes and the surrounding cloud-native systems fit together?	Multiple-choice knowledge exam.
KCSA	Which boundary or control addresses this cloud-native security risk?	Multiple-choice knowledge exam.
CKA	Can I administer the cluster and diagnose the failing layer?	Practical command-line tasks.
CKAD	Can I configure, deploy and troubleshoot an application correctly?	Practical command-line tasks.
CKS	Can I reduce attack paths and verify effective protection?	Practical command-line tasks.

The suggested order above starts with concepts and then adds operational depth. CKA and CKAD preparation overlap; choose their order around your work. CKS requires a prior CKA pass. Knowing a command's name is not enough for the practical exams: verify the target context, namespace, configuration and resulting behavior.

A revision loop for the whole path

Read a topic's memory hook and essential facts. Explain the role of each component without looking.
Use the decision table to distinguish the closest alternatives: Pod versus Deployment, readiness versus liveness, RBAC versus admission, or image scanning versus runtime detection.
Answer the folded recall questions. Explain why the tempting alternative fails, then rate your confidence for the review desk.
Revisit the quick review before moving on. Its expandable topic sections retain the detailed facts and traps.
For CKA, CKAD and CKS, practise in an appropriate disposable environment and verify results. These notes do not create a cluster or run infrastructure commands for you.

Keep the right scope in view

The KCNA guide follows the current four-domain curriculum: Kubernetes foundations, orchestration, application delivery and architecture. It does not use the older five-domain weighting. KCSA includes both the published curriculum and the explicitly named authorization topic on the current Linux Foundation page.

Curriculum documents and practical exam runtime versions can change independently. Each guide records its reviewed scope and version caveats; check the candidate instructions for your booked exam. The separate Golden Kubestronaut program includes additional credentials beyond this five-exam collection.

Renewal reminder

The Linux Foundation CARE program can renew previously earned credentials when you pass or renew a qualifying advanced exam. It does not award an exam you have never passed. CKA or CKAD can renew an eligible KCNA; CKS can renew eligible KCSA and CKA, with KCNA renewal through the documented cascade. The CKA-through-CKS rule applies from 18 June 2026; KCNA/KCSA qualifying paths apply from 1 January 2026. CKAD is not listed as a credential renewed by that CKS cascade. Check the current CARE rules and your actual portal expiration dates.

Sources

Program details checked 10 October 2026. The five guide pages link their individual official scopes and technical references. CertSloth is independent study material and is not endorsed by CNCF or the Linux Foundation.