Expert · GitOps, platform engineering and DevOps careers · topic 52 of 53 · 25 min
DevOps certifications: which, when and how
Explanation
Do certifications matter?
Honestly: a certification alone will not get you a DevOps job, and a strong project can beat one. But in India many recruiters, IT services companies and client contracts filter CVs by certification, and some employers pay for exams or reward them. The hands-on Kubernetes exams are respected because you cannot pass them by memorising answers: you must fix real clusters against the clock.
The main certifications
| Certification | Who it suits | Format (check the current exam page) |
|---|---|---|
| KCNA: Kubernetes and Cloud Native Associate (CNCF / Linux Foundation) | Beginners and students who want a first, broad cloud native certificate | Multiple choice, online proctored |
| CKAD: Certified Kubernetes Application Developer | Developers who deploy and debug apps on Kubernetes | Performance-based tasks, 2 hours, online proctored |
| CKA: Certified Kubernetes Administrator | DevOps and platform engineers who build and fix clusters | Performance-based tasks, 2 hours, online proctored |
| CKS: Certified Kubernetes Security Specialist | Engineers securing clusters; requires an active CKA | Performance-based tasks, 2 hours, online proctored |
| HashiCorp Certified: Terraform Associate | Anyone writing infrastructure as code | Question-based, online proctored; check the current version (for example 003 or 004) |
| AWS Certified DevOps Engineer – Professional (DOP-C02) | Engineers with real AWS experience automating delivery on AWS | Multiple choice and multiple response, long scenario questions |
| Microsoft Certified: DevOps Engineer Expert (AZ-400) | Azure DevOps and GitHub users in Microsoft shops | Pass AZ-400 and also hold AZ-104 (Administrator) or AZ-204 (Developer) |
| Google Professional Cloud DevOps Engineer | Engineers running services on Google Cloud, with a strong SRE flavour | Multiple choice and multiple select |
What "performance-based" means
In the CKA, CKAD and CKS you get a remote desktop with a terminal connected to several real clusters, and a list of practical tasks: create a Deployment, fix a broken node, write a NetworkPolicy, back up etcd. Each task says which cluster context to use. You may keep the official Kubernetes documentation open during the CKA and CKAD (check the handbook for the exact list of allowed sites). The real challenge is time: you need to know the commands well enough that the documentation is a backup, not a textbook.
How to prepare for the Kubernetes exams
- Practise on a free local cluster (kind, k3d or minikube) every day for a few weeks.
- Generate YAML with imperative commands and --dry-run=client -o yaml instead of typing it from memory.
- Bookmark the documentation pages you use most, such as the kubectl quick reference, NetworkPolicy, PersistentVolume and the etcd backup task.
- Use the exam simulator. Registrations for CKA, CKAD and CKS have included sessions on a killer.sh-style simulator, which is harder than the real exam on purpose; check what is included with your registration.
- Always switch to the context named in the task first. Doing a perfect task on the wrong cluster scores zero.
alias k=kubectl # often already set in the exam terminal
export do="--dry-run=client -o yaml"
k create deployment web --image=nginx:1.27 --replicas=3 $do > web.yaml
k expose deployment web --port=80 --target-port=80
k run tmp --image=busybox:1.36 --rm -it --restart=Never -- wget -qO- http://web
k create configmap app-cfg --from-literal=MODE=prod
k create secret generic db --from-literal=PASSWORD=change-me
k set image deployment/web nginx=nginx:1.27.1
k rollout status deployment/web
k rollout undo deployment/web
k create role pod-reader --verb=get,list,watch --resource=pods -n dev
k create rolebinding read-pods --role=pod-reader --serviceaccount=dev:ci -n dev
k config use-context <context-from-the-task>Which order?
- Linux, Git and Docker basics (no exam needed; modules 2 to 4 of this course).
- Optional: KCNA if you are a student or new to the field and want an early, broad certificate.
- CKAD if you are closer to development, or CKA if you are closer to operations. Many people take both, a few weeks apart, because they overlap.
- Terraform Associate: shorter preparation, and Terraform appears in most DevOps job descriptions.
- A cloud DevOps certificate (AWS DOP-C02, Azure AZ-400 or Google Professional Cloud DevOps Engineer) for the cloud your target employers use, usually after some hands-on time on that cloud.
- CKS later, once you hold an active CKA and want to specialise in security.
Cost awareness
These exams are paid in US dollars, and the Kubernetes and professional cloud exams cost several hundred dollars each, which is a lot for a student in India. Plan before you pay: check the current price, whether a free retake is included, and how long the certificate stays valid (many are valid for two or three years, after which you renew). The Linux Foundation often runs discounts, for example around big sales events and KubeCon, and sells bundles. Ask your employer about sponsorship; many companies in India pay for certifications that match client projects.
Need help?
Stuck on a word or an idea? Search this course, or every course, and jump straight to the explanation or a worked question.
Try:
Watch the lesson
DevOps certifications: which, when and how · 1/7
Certifications do not replace projects, but they help you pass CV filters and give your study a clear deadline.
Prefer a video by a teacher? Find free videos on “cka ckad exam preparation tips kubectl imperative commands” on YouTube ↗
In real life: A support engineer in Chennai plans her move to DevOps
Kavya works in L2 application support at an IT services company in Chennai and can study about 8 hours a week. She already uses Linux daily. She plans CKAD (about 60 hours of preparation), then Terraform Associate (about 35 hours), then AWS DOP-C02 after a few months on an internal AWS project. She waits for a Linux Foundation discount, uses both simulator sessions in the last two weeks, and passes CKAD on the first attempt. Her manager moves her onto the team that runs the client's Kubernetes platform, and the company pays for her next exam.
Practice (0/3 done)
Which of these certifications is a multiple-choice exam rather than hands-on tasks in a terminal?
Write plan_exams(hours_per_week, certs) where certs is a list of (name, prep_hours) tuples to study one after another. Each cert takes prep_hours / hours_per_week weeks, ROUNDED UP to whole weeks. Return a list of (name, exam_week): the week number at the end of which you take that exam, counting from week 1. If hours_per_week is 0 or less, raise ValueError.
Do a timed kubectl drill on a local cluster (kind or minikube). Give yourself 20 minutes for these 8 tasks, using imperative commands where you can: (1) create namespace exam; (2) Deployment api with image nginx:1.27, 2 replicas; (3) expose it as a ClusterIP Service on port 80; (4) scale to 4 replicas; (5) update the image to nginx:1.27.1 and watch the rollout; (6) roll it back; (7) create a ConfigMap and mount it as environment variables (YAML from --dry-run); (8) check from a temporary busybox pod that the Service answers.
Quick quiz
Read more (free)
Related help
Before this, learn
This topic builds on these. If something here feels new, open them first.
Related topics
- DevOps careers and interviews in IndiaGitOps, platform engineering and DevOps careers · same module
- GitOps and platform engineeringGitOps, platform engineering and DevOps careers · same module
- Certifications: what, when and whyCyber Security: from zero to SOC analyst · Careers and certifications
- RHCSA (EX200): what it is and how to prepareLinux and Red Hat (RHCSA to RHCE) · Certifications and career
- Go in cloud and DevOps: Kubernetes, Terraform and PrometheusGo Programming (backend and cloud) · CLI tools and Go in cloud and DevOps
- The CCNA 200-301 exam and your study planComputer Networking (CCNA level) · Troubleshooting and the CCNA exam
Questions people ask about this
Open a question to see the answer and why. The first ones are this topic's own quiz, so try the quiz above before you peek.
Which certification requires you to hold an active CKA before you can attempt it?
Answer: CKS
CKS (Certified Kubernetes Security Specialist) requires an active CKA.
To earn Microsoft's DevOps Engineer Expert certification, what do you need besides passing AZ-400?
Answer: AZ-104 or AZ-204
The expert certification needs AZ-400 plus either the Administrator (AZ-104) or Developer (AZ-204) associate certification.
What can you usually keep open during the CKA and CKAD exams?
Answer: The official Kubernetes documentation (check the handbook for the exact list)
The official documentation is allowed, which is why bookmarks and practice with it help.
You did a Kubernetes exam task perfectly but scored zero for it. What is the most likely reason?
Answer: You were on the wrong cluster context
Each task names a context. Switch to it first with kubectl config use-context.
Which certification is designed for complete beginners with no experience requirement?Related
Answer: ISC2 CC (Certified in Cybersecurity)
CC is ISC2's entry-level certification.
Which exam code gives the RHCSA certification?Related
What does a Kubernetes operator do?Related
Answer: Watches the Kubernetes API and automatically manages an application or resource
Operators encode operational knowledge as a control loop.
From Go in cloud and DevOps: Kubernetes, Terraform and Prometheus
How long is the CCNA certification valid?Related
Answer: 3 years
The CCNA is valid for three years; you then recertify with an exam or continuing education credits.
Pass the quiz (60% or more) or mark this topic as done when you are ready.
Your progress is saved on this device only.
Next steps
- 1 more topic in “GitOps, platform engineering and DevOps careers” before its exam: DevOps careers and interviews in India.
- Module 12 exam: GitOps, platform engineering and DevOps careers · 12 questions · 20 min, without help. 4 topics of this module still to finish first.
- 53 topics left in the course before the final exam.
← Previous: Capstone project: from commit to monitored production