Skip to content

Expert · GitOps, platform engineering and DevOps careers · topic 52 of 53 · 25 min

DevOps certifications: which, when and how

Explanation

Certifications do not replace projects, but they help you pass CV filters and give your study a deadline. The Kubernetes exams (CKA, CKAD, CKS) are hands-on tasks in a real terminal; KCNA, Terraform Associate and the cloud DevOps exams are question-based. Take them in a sensible order, practise with a simulator and imperative kubectl commands, and always check the current exam page, because details change.

Do certifications matter?

Honestly: a certification alone will not get you a DevOps job, and a strong project can beat one. But in India many recruiters, IT services companies and client contracts filter CVs by certification, and some employers pay for exams or reward them. The hands-on Kubernetes exams are respected because you cannot pass them by memorising answers: you must fix real clusters against the clock.

The main certifications

CertificationWho it suitsFormat (check the current exam page)
KCNA: Kubernetes and Cloud Native Associate (CNCF / Linux Foundation)Beginners and students who want a first, broad cloud native certificateMultiple choice, online proctored
CKAD: Certified Kubernetes Application DeveloperDevelopers who deploy and debug apps on KubernetesPerformance-based tasks, 2 hours, online proctored
CKA: Certified Kubernetes AdministratorDevOps and platform engineers who build and fix clustersPerformance-based tasks, 2 hours, online proctored
CKS: Certified Kubernetes Security SpecialistEngineers securing clusters; requires an active CKAPerformance-based tasks, 2 hours, online proctored
HashiCorp Certified: Terraform AssociateAnyone writing infrastructure as codeQuestion-based, online proctored; check the current version (for example 003 or 004)
AWS Certified DevOps Engineer – Professional (DOP-C02)Engineers with real AWS experience automating delivery on AWSMultiple choice and multiple response, long scenario questions
Microsoft Certified: DevOps Engineer Expert (AZ-400)Azure DevOps and GitHub users in Microsoft shopsPass AZ-400 and also hold AZ-104 (Administrator) or AZ-204 (Developer)
Google Professional Cloud DevOps EngineerEngineers running services on Google Cloud, with a strong SRE flavourMultiple choice and multiple select
Careful: Exam formats, prices, versions, durations and rules change. Before you book, check the official exam page and candidate handbook for the current details.

What "performance-based" means

In the CKA, CKAD and CKS you get a remote desktop with a terminal connected to several real clusters, and a list of practical tasks: create a Deployment, fix a broken node, write a NetworkPolicy, back up etcd. Each task says which cluster context to use. You may keep the official Kubernetes documentation open during the CKA and CKAD (check the handbook for the exact list of allowed sites). The real challenge is time: you need to know the commands well enough that the documentation is a backup, not a textbook.

How to prepare for the Kubernetes exams

  • Practise on a free local cluster (kind, k3d or minikube) every day for a few weeks.
  • Generate YAML with imperative commands and --dry-run=client -o yaml instead of typing it from memory.
  • Bookmark the documentation pages you use most, such as the kubectl quick reference, NetworkPolicy, PersistentVolume and the etcd backup task.
  • Use the exam simulator. Registrations for CKA, CKAD and CKS have included sessions on a killer.sh-style simulator, which is harder than the real exam on purpose; check what is included with your registration.
  • Always switch to the context named in the task first. Doing a perfect task on the wrong cluster scores zero.
bash
alias k=kubectl                                   # often already set in the exam terminal
export do="--dry-run=client -o yaml"
k create deployment web --image=nginx:1.27 --replicas=3 $do > web.yaml
k expose deployment web --port=80 --target-port=80
k run tmp --image=busybox:1.36 --rm -it --restart=Never -- wget -qO- http://web
k create configmap app-cfg --from-literal=MODE=prod
k create secret generic db --from-literal=PASSWORD=change-me
k set image deployment/web nginx=nginx:1.27.1
k rollout status deployment/web
k rollout undo deployment/web
k create role pod-reader --verb=get,list,watch --resource=pods -n dev
k create rolebinding read-pods --role=pod-reader --serviceaccount=dev:ci -n dev
k config use-context <context-from-the-task>
Imperative commands that save minutes. Write YAML only for what these cannot create, and edit the generated file.

Which order?

  1. Linux, Git and Docker basics (no exam needed; modules 2 to 4 of this course).
  2. Optional: KCNA if you are a student or new to the field and want an early, broad certificate.
  3. CKAD if you are closer to development, or CKA if you are closer to operations. Many people take both, a few weeks apart, because they overlap.
  4. Terraform Associate: shorter preparation, and Terraform appears in most DevOps job descriptions.
  5. A cloud DevOps certificate (AWS DOP-C02, Azure AZ-400 or Google Professional Cloud DevOps Engineer) for the cloud your target employers use, usually after some hands-on time on that cloud.
  6. CKS later, once you hold an active CKA and want to specialise in security.

Cost awareness

These exams are paid in US dollars, and the Kubernetes and professional cloud exams cost several hundred dollars each, which is a lot for a student in India. Plan before you pay: check the current price, whether a free retake is included, and how long the certificate stays valid (many are valid for two or three years, after which you renew). The Linux Foundation often runs discounts, for example around big sales events and KubeCon, and sells bundles. Ask your employer about sponsorship; many companies in India pay for certifications that match client projects.

Careful: Common mistakes: collecting certificates with no project to show; using leaked "exam dumps" (this breaks the exam agreement and can get your certificate revoked); booking the exam before doing a single timed mock; forgetting to switch context in Kubernetes exams. Build the project, practise with the simulator, and read the candidate handbook.

Need help?

Stuck on a word or an idea? Search this course, or every course, and jump straight to the explanation or a worked question.

Try:

Watch the lesson

DevOps certifications: which, when and how · 1/7

Projects first Certificates help

Certifications do not replace projects, but they help you pass CV filters and give your study a clear deadline.

Prefer a video by a teacher? Find free videos on “cka ckad exam preparation tips kubectl imperative commands” on YouTube ↗

In real life: A support engineer in Chennai plans her move to DevOps

Kavya works in L2 application support at an IT services company in Chennai and can study about 8 hours a week. She already uses Linux daily. She plans CKAD (about 60 hours of preparation), then Terraform Associate (about 35 hours), then AWS DOP-C02 after a few months on an internal AWS project. She waits for a Linux Foundation discount, uses both simulator sessions in the last two weeks, and passes CKAD on the first attempt. Her manager moves her onto the team that runs the client's Kubernetes platform, and the company pays for her next exam.

Practice (0/3 done)

Task 1 · Question

Which of these certifications is a multiple-choice exam rather than hands-on tasks in a terminal?

Task 2 · Code · Python

Write plan_exams(hours_per_week, certs) where certs is a list of (name, prep_hours) tuples to study one after another. Each cert takes prep_hours / hours_per_week weeks, ROUNDED UP to whole weeks. Return a list of (name, exam_week): the week number at the end of which you take that exam, counting from week 1. If hours_per_week is 0 or less, raise ValueError.

Task 3 · Practice

Do a timed kubectl drill on a local cluster (kind or minikube). Give yourself 20 minutes for these 8 tasks, using imperative commands where you can: (1) create namespace exam; (2) Deployment api with image nginx:1.27, 2 replicas; (3) expose it as a ClusterIP Service on port 80; (4) scale to 4 replicas; (5) update the image to nginx:1.27.1 and watch the rollout; (6) roll it back; (7) create a ConfigMap and mount it as environment variables (YAML from --dry-run); (8) check from a temporary busybox pod that the Service answers.

Quick quiz

Question 1

1.Which certification requires you to hold an active CKA before you can attempt it?

Question 2

2.To earn Microsoft's DevOps Engineer Expert certification, what do you need besides passing AZ-400?

Question 3

3.What can you usually keep open during the CKA and CKAD exams?

Question 4

4.You did a Kubernetes exam task perfectly but scored zero for it. What is the most likely reason?

Read more (free)

Open a question to see the answer and why. The first ones are this topic's own quiz, so try the quiz above before you peek.

Which certification requires you to hold an active CKA before you can attempt it?

Answer: CKS

CKS (Certified Kubernetes Security Specialist) requires an active CKA.

To earn Microsoft's DevOps Engineer Expert certification, what do you need besides passing AZ-400?

Answer: AZ-104 or AZ-204

The expert certification needs AZ-400 plus either the Administrator (AZ-104) or Developer (AZ-204) associate certification.

What can you usually keep open during the CKA and CKAD exams?

Answer: The official Kubernetes documentation (check the handbook for the exact list)

The official documentation is allowed, which is why bookmarks and practice with it help.

You did a Kubernetes exam task perfectly but scored zero for it. What is the most likely reason?

Answer: You were on the wrong cluster context

Each task names a context. Switch to it first with kubectl config use-context.

Which certification is designed for complete beginners with no experience requirement?Related

Answer: ISC2 CC (Certified in Cybersecurity)

CC is ISC2's entry-level certification.

From Certifications: what, when and why

Which exam code gives the RHCSA certification?Related
What does a Kubernetes operator do?Related

Answer: Watches the Kubernetes API and automatically manages an application or resource

Operators encode operational knowledge as a control loop.

From Go in cloud and DevOps: Kubernetes, Terraform and Prometheus

How long is the CCNA certification valid?Related

Answer: 3 years

The CCNA is valid for three years; you then recertify with an exam or continuing education credits.

From The CCNA 200-301 exam and your study plan

Pass the quiz (60% or more) or mark this topic as done when you are ready.

Your progress is saved on this device only.

Next steps

  1. 1 more topic in “GitOps, platform engineering and DevOps careers” before its exam: DevOps careers and interviews in India.
  2. Module 12 exam: GitOps, platform engineering and DevOps careers · 12 questions · 20 min, without help. 4 topics of this module still to finish first.
  3. 53 topics left in the course before the final exam.

← Previous: Capstone project: from commit to monitored production