Preparing for Kubernetes Certification Exams - Tim Serewicz, The Linux Foundation
Examines preparing for Kubernetes Certification Exams - Tim Serewicz, The Linux Foundation and evaluates key implications for security practitioners.
Summary
### Overview Tim Serewicz, senior trainer and course developer for the Linux Foundation, presents practical strategies and requirements for preparing for Kubernetes certification exams, specifically the Certified Kubernetes Application Developer (CKAD), Certified Kubernetes Administrator (CKA), and the Certified Kubernetes Security Specialist (CKS). He emphasizes that these exams are entirely performance-based rather than multiple-choice or "brain dump" tests, requiring hands-on mastery of live environments under strict time limits.
### Key Topics - **Course Alignment and Updates**: Linux Foundation courses (LFD 459 / LFD 259 for CKAD, LFS 458 for CKA, and LFS 460 for CKS) track Kubernetes' three-month release cycle to ensure students learn real-world skills on current software versions rather than outdated material. - **Practical Exam Format**: Exams are two-hour, online proctored sessions conducted in a terminal prompt inside Chrome or Chromium. Candidates are evaluated on achieving specific end-state outcomes across multiple clusters without step-by-step guidance. - **Preparation and Study Methodology**: Utilizing the CNCF curriculum GitHub repository to create an editable checklist of all bullet points, mapping relevant `kubectl` commands, and curating verified YAML templates. - **Security and the CKS**: The upcoming CKS requires an active CKA credential and focuses on locking environments down through cluster hardening, auditing, and tools like AppArmor, seccomp, Pod Security Policies (PSP), and Open Policy Agent (OPA). - **Digital Credentials**: Linux Foundation issues digital badges via Credly's Acclaim platform that verify credential authenticity and validity for employers.
### Technical Details - **Allowed Exam Resources**: Candidates are restricted to using a Chrome/Chromium browser and may open only one additional browser tab restricted to `kubernetes.io/docs`, `github.com/kubernetes`, and `kubernetes.io/blog` (and their subdomains). Serewicz recommends testing and bookmarking known-good YAML snippets strictly from these locations ahead of time. - **Exam Environment Logistics**: Requires a movable webcam for a 360-degree room scan, clear desk check, microphone check, matching government ID verification, and passing an automated hardware compatibility test. - **Terminology Nuance**: In curriculum objectives, verbs like "understand" or "manage" require complete end-to-end operational knowledge (e.g., for liveness and readiness probes: creating, integrating, troubleshooting, and cleanly removing them; for RBAC: creating Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings). - **Failure Modes & Mistakes**: Because candidates have direct cluster access, incorrect commands can break critical node or cluster components entirely, turning systems into unrecoverable "bricks" within the two-hour window.
### Takeaways - Time management is crucial; use countdown timers while practicing and flag difficult tasks to avoid getting stuck on a single item. - Prepare custom study sheets linking each curriculum bullet point directly to exact `kubectl` commands and validated documentation URLs. - Exams include a free retake, which alleviates some initial testing pressure.
Related talks
The Linux Foundation·26 min
Reviews LF Live Webinar: On-Prem and Cloud: Closing the Correlation Gap and evaluates key implications for security practitioners.
The Linux Foundation·35 min
Darae Ahn
Explores from Contribution To Culture: 14 Years of Building an OSPO That Outgrew Itself and evaluates key implications for security practitioners.
The Linux Foundation·31 min
S. Han
Discusses from Region To Multi-AZ: Building Resilient Cloud Infrastructure With OpenStack… and evaluates key implications for security practitioners.


