Skip to content

Preparing for Kubernetes Certification Exams - Tim Serewicz, The Linux Foundation

Tim Serewicz

CloudThe Linux Foundation49 minIntermediateOpen on YouTube ↗

Examines preparing for Kubernetes Certification Exams - Tim Serewicz, The Linux Foundation and evaluates key implications for security practitioners.

Summary

### Overview Tim Serewicz, senior trainer and course developer for the Linux Foundation, presents practical strategies and requirements for preparing for Kubernetes certification exams, specifically the Certified Kubernetes Application Developer (CKAD), Certified Kubernetes Administrator (CKA), and the Certified Kubernetes Security Specialist (CKS). He emphasizes that these exams are entirely performance-based rather than multiple-choice or "brain dump" tests, requiring hands-on mastery of live environments under strict time limits.

### Key Topics - **Course Alignment and Updates**: Linux Foundation courses (LFD 459 / LFD 259 for CKAD, LFS 458 for CKA, and LFS 460 for CKS) track Kubernetes' three-month release cycle to ensure students learn real-world skills on current software versions rather than outdated material. - **Practical Exam Format**: Exams are two-hour, online proctored sessions conducted in a terminal prompt inside Chrome or Chromium. Candidates are evaluated on achieving specific end-state outcomes across multiple clusters without step-by-step guidance. - **Preparation and Study Methodology**: Utilizing the CNCF curriculum GitHub repository to create an editable checklist of all bullet points, mapping relevant `kubectl` commands, and curating verified YAML templates. - **Security and the CKS**: The upcoming CKS requires an active CKA credential and focuses on locking environments down through cluster hardening, auditing, and tools like AppArmor, seccomp, Pod Security Policies (PSP), and Open Policy Agent (OPA). - **Digital Credentials**: Linux Foundation issues digital badges via Credly's Acclaim platform that verify credential authenticity and validity for employers.

### Technical Details - **Allowed Exam Resources**: Candidates are restricted to using a Chrome/Chromium browser and may open only one additional browser tab restricted to `kubernetes.io/docs`, `github.com/kubernetes`, and `kubernetes.io/blog` (and their subdomains). Serewicz recommends testing and bookmarking known-good YAML snippets strictly from these locations ahead of time. - **Exam Environment Logistics**: Requires a movable webcam for a 360-degree room scan, clear desk check, microphone check, matching government ID verification, and passing an automated hardware compatibility test. - **Terminology Nuance**: In curriculum objectives, verbs like "understand" or "manage" require complete end-to-end operational knowledge (e.g., for liveness and readiness probes: creating, integrating, troubleshooting, and cleanly removing them; for RBAC: creating Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings). - **Failure Modes & Mistakes**: Because candidates have direct cluster access, incorrect commands can break critical node or cluster components entirely, turning systems into unrecoverable "bricks" within the two-hour window.

### Takeaways - Time management is crucial; use countdown timers while practicing and flag difficult tasks to avoid getting stuck on a single item. - Prepare custom study sheets linking each curriculum bullet point directly to exact `kubectl` commands and validated documentation URLs. - Exams include a free retake, which alleviates some initial testing pressure.

Related talks