How to Pass the CKAD (2026): Study Plan for the Hands-On Kubernetes Developer Exam

The CKAD proves you can build and run applications on Kubernetes — not administer clusters, but deploy, configure, observe, and troubleshoot the workloads that run on them. Like its sibling the CKA, it's a hands-on exam: two hours in a live terminal solving real tasks, scored on whether your changes actually work. That means the prep is reps at the command line, not reading. Here's the plan.

The domains and where the points are

| Domain | Weight | What it covers |
|---|:---:|---|
| Application Environment, Configuration & Security | 25% | ConfigMaps, Secrets, SecurityContexts, ServiceAccounts, resource limits, CRDs |
| Application Design and Build | 20% | Pods, multi-container patterns, init containers, jobs, volumes |
| Application Deployment | 20% | Deployments, rolling updates/rollbacks, Helm, blue-green/canary |
| Services and Networking | 20% | Services, NetworkPolicies, Ingress |
| Application Observability and Maintenance | 15% | Probes, logging, monitoring, debugging |

Application Environment, Configuration & Security (25%) is the largest domain — it's where the 2025 curriculum added weight, and it's dense with the config primitives (ConfigMaps, Secrets, SecurityContexts) that appear constantly. Everything else clusters around 20%, so no domain is skippable.

The plan (3–5 weeks) — live in kubectl

You do not pass the CKAD by watching videos; you pass it by doing. Work in a real cluster (minikube, kind, or cloud) daily.

Week 1 — Core objects and kubectl speed. Pods, multi-container patterns (sidecar, ambassador, adapter), init containers, and imperative creation with kubectl run/create --dry-run=client -o yaml to scaffold YAML fast. Speed here pays off everywhere.

Week 2 — Configuration and security (25%). ConfigMaps and Secrets (env vars vs. volume mounts), resource requests/limits, SecurityContexts, ServiceAccounts, and CRDs. This is the biggest domain — drill it hardest.

Week 3 — Deployment and networking (40% combined). Deployments, rolling updates and rollbacks, scaling, Helm basics, and the deployment strategies (blue-green, canary). Then Services (ClusterIP/NodePort), NetworkPolicies, and Ingress.

Weeks 4–5 — Observability and timed practice. Liveness/readiness/startup probes, kubectl logs, debugging crashing pods, and resource monitoring. Then do full, timed two-hour practice sessions in a live cluster — the only thing that builds exam speed.

Exam-day mechanics

• Hands-on, ~2 hours, performing tasks in live clusters. Passing score: 66%. Costs $445 (includes one free retake); certification is valid for 2 years.
• The environment runs Kubernetes v1.35 — practice on a current version.
• The Kubernetes docs are allowed — learn to navigate kubernetes.io fast.
• Speed wins: alias k=kubectl, --dry-run=client -o yaml to scaffold, and always set the right context/namespace before each task (kubectl config use-context). A correct answer in the wrong namespace scores zero.

Where practice questions fit

The CKAD is performance-based, so cluster time is irreplaceable — but knowledge questions are the fastest way to find the gaps before you drill them at the terminal. CertBase's CKAD bank is built for that: questions written to the current CKAD curriculum, with manifest-reading and command-selection items and a detailed explanation on every one. Rebuilt and independently verified in July 2026, one-time purchase with lifetime access, free samples on the exam page, and a 30-day money-back guarantee. Pair it with real cluster practice, not instead of it.

Are you ready?

• ✅ You create objects imperatively and fast — no hand-writing YAML you could generate
• ✅ ConfigMaps, Secrets, probes, and SecurityContexts are second nature
• ✅ You can navigate the Kubernetes docs to the right page in seconds
• ✅ You always set the correct context/namespace first
• ✅ You've done full, timed two-hour runs in a live cluster

FAQ

Is the CKAD multiple choice? No — it's entirely hands-on. You build, configure, and troubleshoot real workloads from the command line, scored on whether they work. Passing requires 66%.

How is the CKAD different from the CKA? The CKA is for cluster administrators (installation, RBAC, etcd, troubleshooting cluster components); the CKAD is for developers (deploying and configuring applications). CKAD has no cluster-installation content and leans into app config, deployment, and observability.

How long is it valid and how much? $445 (includes one free retake), valid for two years, and the exam environment runs Kubernetes v1.35.

Can I use the docs during the exam? Yes — the official Kubernetes documentation is available. Practice with it so you can find the right page fast on exam day.