Security fundamentals for Kubernetes: cluster component security, the cloud native threat model, platform security controls, and compliance frameworks for containerised platforms.
CNCF does not publish numeric exam codes — KCSA is the common abbreviation.
Kubernetes and Cloud Native Security Associate is CNCF's foundational-level cybersecurity certification, referred to across the industry by the shorthand KCSA. The exam runs for 1 hour 30 minutes and presents up to 60 questions, with a pass mark of 75%. It costs US$250 at the standard rate.
CNCF publishes the syllabus as 6 weighted domains. Kubernetes Cluster Component Security carries the most weight at 22%, and the three largest domains together account for roughly 60% of the scored content — worth knowing before you decide where study time goes.
Confirm these details on the official CNCF page before booking — vendors adjust format and pricing without notice.
Some forms include unscored trial questions
Standard rate, before local taxes
The published exam guide for KCSA, in the vendor's own order.
01Overview of Cloud Native Security
14%02Kubernetes Cluster Component Security
22%03Kubernetes Security Fundamentals
22%04Kubernetes Threat Model
16%05Platform Security
16%06Compliance and Security Frameworks
10%Basic Kubernetes knowledge; KCNA is a useful primer.
Foundational level — Entry-level credentials that validate core concepts and vocabulary.
This is a complete KCSA exam guide, but a practice bank is not available yet. We keep the guide published because the format, weighted domains and official sources remain useful when planning your study.
The syllabus breakdown above is the most useful study plan available either way: work through the domains in weight order.
KCSA is part of CNCF Kubestronaut, which requires 5 exams.
CNCF lists up to 60 questions, to be completed in 1 hour 30 minutes. Question counts can vary slightly between exam forms, and unscored trial questions are sometimes included.
75%. Confirm the current figure on the official exam page before booking, as vendors adjust cut scores when an exam form is refreshed.
The standard price is US$250. Local pricing, taxes and any retake policy vary by region, so check the official page for the figure that applies to you.
Basic Kubernetes knowledge; KCNA is a useful primer.
The exam guide covers Overview of Cloud Native Security, Kubernetes Cluster Component Security, Kubernetes Security Fundamentals, Kubernetes Threat Model and Platform Security, plus 1 further domain. The full weighted breakdown is listed above.