Exampractice
DevOps & Linux

How to Prepare for the CKAD Exam

A CKAD preparation method built around imperative kubectl fluency, timed speed drills and cluster-state verification — the habits the hands-on exam rewards.

Kenji Nakamura · 9 min read
Training card listing timed kubectl drills with tick-boxes, styled like a gym workout plan

Preparing for the Certified Kubernetes Application Developer (CKAD) exam is a training problem, not a reading problem. The exam gives you two hours of hands-on tasks in live Kubernetes clusters, so the preparation that works looks less like studying for a test and more like an athlete's programme: short, repeated, timed drills that turn every core operation — create, configure, expose, probe, debug — into muscle memory. A candidate who has typed kubectl create deployment five hundred times will beat a candidate who has read about Deployments for five hundred hours, every time.

This article prescribes that routine: the environment to build, the imperative-kubectl habits to install, the drill catalogue to cycle through, how to use documentation and practice tests properly, and the exam-day execution tactics that protect your marks. It assumes you already know what the exam is — format, domains, cost and registration live in the CKAD certification guide — and it stays out of the difficulty debate, which how hard is the CKAD exam handles. If you want this material arranged into a dated, week-by-week schedule, the CKAD study plan for Kubernetes developers does exactly that; here the focus is the method itself.

Step 1: Build a practice environment you can break

You cannot drill without a cluster you are allowed to wreck. Set one up on day one:

  • A local cluster using any lightweight distribution you like (minikube, kind, k3s or similar) is sufficient for almost every CKAD topic. Multi-node capability is a bonus for scheduling and NetworkPolicy practice, not a requirement.
  • Match the exam's Kubernetes version where practical. As of 2026 the exam is based on Kubernetes v1.35, and the environment tracks new minor releases within weeks — check the official CKAD page for the version in force before you book, and practise on something close to it.
  • Work in a plain terminal with a terminal editor. The exam is a remote terminal session, so a graphical IDE with YAML autocomplete is training you for the wrong event. If vim makes you wince, schedule fifteen minutes of editor practice a day until it does not; editor friction is a tax on every exam task.

Rebuild this environment from scratch at least once. Deleting and recreating your cluster teaches you that broken state is cheap — the exact mindset the exam rewards.

Step 2: Make imperative kubectl your first language

The single highest-leverage CKAD preparation habit is refusing to write YAML from a blank file. Kubernetes gives you generators for most of what the exam asks:

`

kubectl create deployment web --image=nginx --replicas=3 --dry-run=client -o yaml > web.yaml

kubectl expose deployment web --port=80 --target-port=8080 --dry-run=client -o yaml > svc.yaml

kubectl create configmap app-config --from-literal=env=prod

kubectl run debug --image=busybox --restart=Never -- sleep 3600

kubectl set image deployment/web nginx=nginx:1.27

`

The pattern is always the same: generate a correct skeleton imperatively, edit only the fields the task actually demands, apply, verify. Train the whole loop until it is reflexive. Alongside it, install the supporting habits:

  • Alias and autocomplete. alias k=kubectl plus shell completion saves real minutes across a full exam.
  • Namespace discipline. Practise every drill with an explicit -n flag or by setting the namespace in your context first. Solving tasks in the wrong namespace is a classic zero-mark outcome.
  • Fast verification. After every operation, confirm it: k get pods -o wide, k describe deploy web, k logs, a quick in-cluster wget against a Service. Verification within seconds of creation is the habit that catches wrong probes, wrong ports and wrong selectors while they are still cheap to fix.

Step 3: Drill the curriculum, weighted the way the exam weights it

Structure your hands-on work around the five official CKAD domains rather than whatever topics you happen to enjoy. The heaviest domain — application environment, configuration and security, at 25% as of 2026 — is exactly the one application developers tend to under-practise. A drill catalogue to cycle through, with target times to aim for once warmed up:

  1. Workload scaffolding (daily, 10 minutes). Create a Deployment, a Job, a CronJob and a multi-container Pod with an init container — each from imperative generators, each verified. Target: under two minutes apiece.
  2. Configuration plumbing (daily, 15 minutes). Mount a ConfigMap as env vars and as a volume; create a Secret and consume it; add resource requests and limits; set a SecurityContext (non-root user, read-only root filesystem); attach a ServiceAccount. This block maps to the exam's biggest domain — do not let it be your weakest.
  3. Networking (alternate days). Expose Deployments via ClusterIP and NodePort Services; write an Ingress rule; write a NetworkPolicy that allows only one labelled client, then prove it blocks everything else.
  4. Rollouts (alternate days). Update a Deployment's image, watch the rollout, roll it back, pause and resume it, scale it. Target: a complete update-and-rollback cycle in under three minutes.
  5. Observability and debugging (daily, 15 minutes). Deliberately break things and fix them. Deploy a Pod with a bad image tag, a failing liveness probe, a missing ConfigMap reference or an impossible resource request, then diagnose from describe, events and logs. A practised diagnostic sequence — status, events, logs, spec — is worth a large share of the maintenance domain.
  6. Probes (embedded everywhere). Add liveness and readiness probes to workloads you create in other drills, so probe syntax stops being a special occasion.

Keep a scorecard. When a drill's time stops improving and its result is reliably correct, cut its frequency and reinvest the time in whatever is still slow. That feedback loop — measure, target the weakness, re-measure — is the whole method.

Step 4: Learn the documentation like a map, not a book

CNCF's performance-based exams allow access to specified official documentation from inside the exam environment, with the exact allowed set defined in the candidate handbook — read that section of the handbook yourself before exam day so you know precisely what you may open. The preparation implication is subtle: you are not memorising the docs, you are memorising their geography. During every practice session, when you need a reference, practise landing on it fast — know which pages hold the YAML examples you copy from most (probes, volumes, NetworkPolicies, SecurityContexts) and how you would search for them. A candidate who needs forty seconds to find a known example page pays a small cost; one who browses in real time pays a ruinous one.

Two related habits worth building deliberately:

  • Copy, then trim. Pasting a documentation example and deleting what you do not need is faster and safer than composing from memory.
  • Trust the API reference commands. kubectl explain deployment.spec.template.spec.containers --recursive answers field-name questions without leaving the terminal at all.

Step 5: Convert knowledge into speed with timed rehearsal

Everything above builds capability; timed rehearsal converts it into an exam result. From roughly the midpoint of your preparation:

  1. Run mixed timed sets. Pick six to eight drills across different domains, set a countdown, and work through them in one sitting. The mixing matters — the exam does not group tasks by topic, and context-switching is part of the load.
  2. Practise triage. In every timed set, deliberately include one task you expect to struggle with, and rehearse the discipline of parking it after a couple of stalled minutes and returning at the end. Skipping well is a skill, and exam day is a bad place for its first outing.
  3. Benchmark with full-length simulations. Your CKAD registration includes two killer.sh simulator sessions — spend one mid-preparation to expose weaknesses while there is time to fix them, and keep one for the final week. A timed practice-test simulation plays the same role for domain-by-domain benchmarking: the point of any practice test is diagnostic, so afterwards, sort your errors by domain, distinguish knowledge gaps (you did not know) from execution gaps (you knew but were slow or sloppy), and rebuild next week's drills around the worst domain. Re-answering the same questions until you remember them teaches you the questions, not Kubernetes — vary your practice sources and always analyse rather than re-memorise.
  4. Rehearse the conditions. At least once, run a full two-hour session with one monitor, no phone, no second screen of notes — the same constraints the PSI-proctored exam imposes. Candidates are routinely surprised by how different the same tasks feel without their usual scaffolding.

A realistic calibration: a developer who deploys to Kubernetes through CI but rarely touches kubectl directly typically needs several weeks of this routine before timed sets feel comfortable, most of it spent in steps 2 and 3. There is no official study-hours figure for the CKAD, so let your drill scorecard and simulation results — not a borrowed number — tell you when you are ready.

Step 6: Execute well on exam day

Preparation ends with a plan for the two hours themselves:

  • Set up your shell first. Alias, completion and any permitted conveniences, in the first minute, so every subsequent task is cheaper.
  • Read each task twice, noting context and namespace. Switching to the specified cluster context is non-negotiable overhead on every task; skipping it turns correct work into zero marks.
  • Answer the marks, not your pride. Work in task order but bank quick wins immediately and park anything that stalls. A parked task revisited with twenty calm minutes at the end is worth more than the same task fought through minute twelve of rising panic.
  • Verify before you move on. Ten seconds of kubectl get after each task is the cheapest insurance the format offers.
  • Never leave partial work undone when part-completion is possible. Cluster-state scoring means a half-right answer can still earn something; an untouched task cannot.

And remember the safety rails you bought with registration: a 12-month eligibility window and one free retake. A first attempt that falls short is a detailed reconnaissance mission, not a disaster.

Common preparation mistakes to avoid

  • Course-collecting. Watching a second and third video course instead of drilling is the most popular way to feel productive while staying slow.
  • Practising only what you like. Deployment drills are comfortable for developers; SecurityContexts and NetworkPolicies are where the under-practised marks hide.
  • Writing YAML from scratch as a point of honour. The exam scores outcomes, not artisanal manifests.
  • First timed session in the final week. Timing exposes problems; expose them early enough to fix.
  • Ignoring the candidate handbook. Environment rules, allowed resources and proctoring requirements are all defined there, and discovering them during check-in is avoidable stress.

Your readiness checkpoint before booking

You are ready to schedule the CKAD when the following are simultaneously true: your daily drills across all five domains land inside their target times with correct, verified results; a full-length timed simulation puts you comfortably clear of the 66% pass mark rather than scraping it; you can navigate the permitted documentation to any core example page in well under a minute; and a two-hour single-monitor rehearsal no longer rattles you. At that point, book a slot inside your eligibility window and taper — light daily drills, one final simulator session, no new topics in the last few days. If you would rather follow this method on a fixed calendar, the week-by-week CKAD study plan is the companion piece; and if you are still deciding whether the CKAD or the CKA deserves this effort first, CKAD vs CKA: which exam should you take first will settle it before you commit the weeks.

Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.

Put it into practice

Test what you have just read

Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.

You may also like