Red Hat Certified System Administrator Guide
·11 min read
What the RHCSA is, how the hands-on EX200 exam works, what it costs, how scoring and renewal work, and where it fits in Red Hat's 2026 certification tracks.
Continue readingWhat the CKAD certification covers, how the hands-on exam works, what it costs in 2026, and how registration, scoring and renewal actually operate.

Picture a backend developer whose team has just migrated its services onto a Kubernetes cluster run by a separate platform group. She can write the application; what she now needs to prove — to her employer, and honestly to herself — is that she can package it, configure it, expose it and debug it on a cluster she does not administer. The Certified Kubernetes Application Developer (CKAD) exists for exactly that person. Created by the Cloud Native Computing Foundation (CNCF) and delivered through The Linux Foundation, it puts you in front of live Kubernetes clusters for two hours of practical, command-line tasks — nothing multiple-choice about it. The 2026 headline numbers: $445 USD, tested against Kubernetes v1.35, a 66% passing score, and a credential valid for two years.
What follows is the factual reference you need before registering: the certification's scope and audience, the five domains with their weightings, format and proctoring, pricing and inclusions, and the mechanics of scoring, retakes and renewal. Two neighbouring questions are handled elsewhere by design — how hard the CKAD exam really is tackles perceived difficulty, and how to prepare for the CKAD exam builds the study routine.
The CKAD certifies that a developer can perform the day-to-day Kubernetes work that application teams actually do: defining application resources in YAML, configuring Pods and Deployments, wiring up Services, managing configuration and secrets, setting resource limits and probes, and diagnosing why a workload will not start or serve traffic. The CNCF created the programme, and The Linux Foundation delivers the exam and training around it.
One point of branding trips up new candidates: is this a CNCF certificate or a Linux Foundation one? Both, in different senses. The CNCF stewards the Kubernetes project and owns the certification programme; The Linux Foundation, its parent organisation, runs the training portal where you register, pay and sit the exam. Seeing either name on official pages is normal — neither is a red flag.
Within the CNCF ladder, the CKAD sits at the intermediate tier alongside the Certified Kubernetes Administrator (CKA). A common misconception is that CKAD is "the beginner exam" — it is not. The genuinely entry-level Kubernetes credential is the Kubernetes and Cloud Native Associate (KCNA), a multiple-choice exam. The full ladder, including where the security-focused exams fit, is mapped in our overview of Kubernetes certifications.
The CKAD is aimed at people who build and ship software onto Kubernetes clusters that someone else administers. That typically means:
It is not primarily aimed at cluster administrators. If your job involves installing clusters, managing nodes, and troubleshooting the control plane, the CKA is the closer fit — CKA also happens to be the sole prerequisite for the Certified Kubernetes Security Specialist (CKS), which the CKAD is not. If you are torn between the two, the head-to-head comparison in CKA vs CKAD settles that question by role; this guide will not re-litigate it.
Nothing formal. The CKAD has no prerequisites — no prior certification, no mandated course, no documented experience requirement. Anyone can purchase and sit the exam. In practice, you will want genuine hands-on comfort with kubectl, YAML and container fundamentals before booking, but that is a readiness question, not an eligibility one.
As of 2026, The Linux Foundation lists five domains for the CKAD, weighted as follows:
| Domain | Weight |
|---|---|
| Application Environment, Configuration and Security | 25% |
| Application Design and Build | 20% |
| Application Deployment | 20% |
| Services and Networking | 20% |
| Application Observability and Maintenance | 15% |
Domain weightings can shift when the CNCF revises curricula, so treat the table above as a 2026 snapshot and confirm the current breakdown on the official CKAD page before you book.
Reading the domain names tells you less than interpreting them, so here is what each one means in working terms.
The heaviest domain covers how applications consume configuration and run safely: ConfigMaps and Secrets, environment variables, SecurityContexts, ServiceAccounts, resource requests and limits, and the surrounding admission and authorisation concepts a developer touches. The weight is a signal — candidates who treat configuration as an afterthought and focus only on Deployments give away a quarter of the exam.
Building container images, choosing appropriate workload resources (Deployments versus Jobs versus CronJobs versus DaemonSets), multi-container Pod design patterns such as sidecars and init containers, and using ephemeral and persistent volumes from the application side.
Rollouts and rollbacks, deployment strategies such as blue/green and canary at the primitive level, scaling, and using packaging tooling to deploy applications. This is where fluency with Deployment mechanics — not just creating them, but updating and reverting them under time pressure — earns its keep.
Exposing applications via Services, understanding ClusterIP versus NodePort behaviours, Ingress resources for HTTP routing, and NetworkPolicies that restrict traffic between application components.
Liveness, readiness and startup probes; reading logs and events; debugging failing workloads; and understanding API deprecations enough to update manifests that reference retired API versions.
The CKAD is an online, remotely proctored, performance-based exam lasting two hours. There is no test-centre option and no multiple-choice component: you are placed in front of live Kubernetes clusters through a remote terminal and given practical tasks to complete. Your work is what gets scored — the cluster state you leave behind, not your reasoning about it.
Key format facts as of 2026:
The practical consequence of this format is that typing speed, kubectl shortcuts and calm navigation of the docs matter in a way they never would on a written exam. That is a difficulty story, though, and it is told properly in how hard the CKAD exam is.
As of 2026, The Linux Foundation lists the standalone CKAD exam at $445 USD. Two bundle options exist at registration:
Regional taxes apply and pricing can vary by country, so confirm the figure at checkout on the official page. The Linux Foundation also runs frequent sitewide sales during the year — discounts are common around major promotional periods — so if your timeline is flexible, it is rarely necessary to pay full list price. No specific discount is guaranteed, however.
If you expect to take more than one CNCF exam, note that a CKA + CKAD + CKS bundle is listed at $1,245 USD as of 2026, against $1,335 for the three exams purchased separately.
The registration fee buys more than a single sitting, and this materially changes the cost-of-failure maths compared with certifications that include no retake:
The passing score is 66%, per the Linux Foundation candidate FAQ. Scoring is automated against the state of your exam clusters: tasks carry weight, partial credit exists at the task level where sub-items are independently checkable, and there is no penalty for attempting something and getting it wrong beyond the time you spend.
Results are not instant — because the exam is performance-based, your submission is evaluated after the session ends and results are delivered afterwards rather than on-screen at submission. If you fall short, the included retake means your $445 covers a second attempt, provided you rebook inside your 12-month window.
CKAD certifications earned on or after 1 April 2024 are valid for two years. Credentials earned before that date were grandfathered at the older three-year validity — which is why you will still find older articles citing three years; that information is out of date for new candidates.
Renewal is a full retake: there is no continuing-education or credit-based renewal path for CNCF exams. When your two years approach expiry, you register again and pass the then-current version of the exam, which by design will test a newer Kubernetes release than the one you originally certified on.
Registration is straightforward, but the sequencing matters because of the eligibility window:
A sensible pattern is to buy during a sale even if you intend to sit months later — the 12-month window makes the exam purchase a low-risk forward commitment, and it puts a deadline behind your study plan. For the plan itself, see how to prepare for the CKAD exam; for a scheduled version broken into weeks, the CKAD study plan for Kubernetes developers takes that further.
No. The CKAD is entirely performance-based: two hours of practical tasks completed from a command line against live Kubernetes clusters. There are no multiple-choice questions. This is one of the main reasons the credential carries strong hiring signal — it is difficult to pass by memorisation alone.
No. The CKAD has no prerequisites of any kind. The KCNA is an optional entry-level stepping stone for people new to cloud native concepts, not a requirement. Where each credential sits in a longer progression is covered in the Kubernetes certification career path.
The Linux Foundation does not publish an official task count for the CKAD, and the number may vary. Treat any source quoting an exact figure with caution and plan for time pressure rather than a fixed count.
No — that path runs through the CKA. Holding a current CKA is the sole prerequisite for the Certified Kubernetes Security Specialist; the CKAD does not qualify you for it. The CKS guide covers that exam in full.
The CNCF publishes no salary data tied to the CKAD, and no verified certification-specific pay premium exists. For general market figures on Kubernetes-adjacent roles, see the Kubernetes certification salary guide.
The test that settles it is simple: look at your last month of work. If it was spent writing manifests, wiring Services, tuning probes and chasing down Pods that would not start, the CKAD's five domains describe your job, and passing a live-cluster exam is a credible way to have that fluency taken seriously. The 2026 terms — $445 including a retake, a 12-month window and two simulator sessions — leave little to object to for a proctored professional exam. If, instead, that month was spent on nodes, control planes and cluster upgrades, read the CKA guide before committing; and where sequencing the two is the real dilemma, CKAD vs CKA: which exam first answers exactly that.
Before any money changes hands, it is worth measuring the gap between where you stand and what the curriculum expects. Working through CKAD practice questions domain by domain against the official objectives gives you that measurement cheaply, so the $445 is spent on an exam you are ready for rather than a diagnostic you were not.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·11 min read
What the RHCSA is, how the hands-on EX200 exam works, what it costs, how scoring and renewal work, and where it fits in Red Hat's 2026 certification tracks.
Continue reading·11 min read
What the RHCE credential is in 2026: the Ansible-based EX294 exam, prerequisites, cost, renewal rules and the retitling under Red Hat's new track system.
Continue reading·7 min read
An honest look at RHCSA difficulty: why the hands-on EX200 format fails people who could pass on paper, who struggles most, and how failure actually works.
Continue reading