KCA Exam Guide 2026: cost, format, passing score and study plan

KCA exam facts

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation.

KCA exam domains and weights

How many questions and how long is KCA?

The KCA exam has 60 questions and a time limit of 90 minutes, as stated in the Linux Foundation's exam instructions and checked on 23 October 2026. Delivery is: online, proctored, multiple-choice. That leaves roughly 90 seconds per question if you spread the time evenly. The questions are spread over 6 exam domains, and the published domain weights tell you how much of the paper each domain accounts for, so heavier domains deserve proportionally more of your practice time. GoldenKube is an independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation, so confirm every figure on the official page before you book.

KCA questions on writing policies show YAML and ask what a rule validates, mutates or generates, so practise reading policy snippets line by line.

Pacing matters more than raw speed on a multiple-choice paper. A simple routine is to answer what you know on the first pass, flag anything that needs a second look, and use the remaining minutes on the flagged questions rather than stalling early. With about 90 seconds on average per question, a question that has taken more than twice that is a good candidate for flagging.

Practice should mirror the exam shape: one question at a time, a committed answer, then the explanation. GoldenKube's practice mode works this way and brings missed questions back until you answer them correctly, which is closer to how recall is tested than rereading notes.

What is the passing score for KCA?

The Linux Foundation lists the KCA passing score as 75% (checked 23 October 2026). Treat the percentage as the target and aim comfortably above it in practice. The heavier a domain is weighted, the more of the exam it decides, so neglecting a large domain is the costliest way to fall short. The largest KCA domain, Writing Policies, carries 32% of the exam, and the next, Fundamentals of Kyverno, carries 18%. Together they make up 50% of the exam, so plan to be reliably above the line in both before you book, and treat every smaller domain as the place to pick up the remaining points.

Use the passing score as a calibration tool. When you practise, track your accuracy per domain instead of one overall number, and treat a domain you keep missing as a gap to close before booking. A single good overall percentage can hide a weak, heavily weighted domain.

The official certification page is the authority for the passing score and can change, so read it again on the week you register. The source links below point to the exact pages this guide was checked against.

How much does KCA cost and how long is it valid?

The KCA exam fee is $250 (USD), listed on the official certification page and checked 23 October 2026. The certification is valid for 2 years, so plan for it to lapse unless you renew it; the official page is the place to confirm how renewal works. Prices and bundles can change, so treat the figure here as the list price on the checked date and confirm it at checkout. KCA is one of the certifications in the Golden Kubestronaut program that GoldenKube helps you prepare for. Budget for the exam fee itself, and remember that a certification only helps while it is current, so decide up front when you would renew it and what that renewal would cost.

Validity is the part people forget when planning a program such as Golden Kubestronaut: with 2 years of validity, the order you take the exams in decides when each one needs renewing, and taking KCA early in a long sequence can mean renewing it before you finish the rest.

KCA is a Golden-tier certification on a single project, so study time concentrates on the Kyverno documentation.

GoldenKube practice itself is free: 10 guest answers, then a free account, no credit card. The exam fee is paid to the Linux Foundation, not to GoldenKube.

How hard is KCA?

KCA is hard because one skill dominates. Writing Policies is 32% of the exam, Fundamentals of Kyverno and Installation, Configuration, and Upgrades are 18% each, Kyverno CLI is 12% and Applying Policies and Policy Management are 10% each. The smaller operational domains are mostly recall about installation, commands and reports. Writing policies is judgement: telling apart validate, mutate, generate and image verification rules, reading match and exclude blocks, and following variables and JMESPath. Options often differ in a single field, so careful YAML reading decides the result. Candidates who have only applied ready-made policies do well on the operational domains and lose points on the largest one. This guide does not quote pass rates; the practical test is writing a rule of each type from memory.

KCA is about policy as code, and Writing Policies is the heaviest domain at 32%. Fundamentals of Kyverno and Installation, Configuration, and Upgrades follow at 18% each, then Kyverno CLI at 12%, and Applying Policies and Policy Management at 10% each. With six domains and one clearly dominant, the exam rewards deep knowledge of the policy language over broad familiarity.

Writing policies means understanding rule types (validate, mutate, generate, verify images), match and exclude blocks, preconditions, variables and JMESPath expressions. Those details decide whether an answer option is correct. The smaller domains are more mechanical: how Kyverno is installed and configured, which CLI commands test or apply policies before they reach a cluster, and how reports and exceptions are managed.

Write a few policies yourself and test them with the CLI against sample manifests. Seeing a validate rule reject a resource, and a mutate rule change one, makes the rule-type questions much easier than memorising syntax from the docs.

Registration, scheduling and retakes

Register through the official KCA certification page on the Linux Foundation site. Delivery is described as: Online, proctored, multiple-choice. Prerequisites: None. Retake policy: One retake per exam purchase if a passing score is not achieved. These statements were checked on 23 October 2026 against the pages listed under Resources. The rules for identification, the testing environment and rescheduling are set by the Linux Foundation, so read its candidate documentation for the current requirements before you book. Book a slot only after your practice results are stable across every domain, leave a buffer between your last study session and the exam, and keep the confirmation details somewhere you can find them quickly.

Kyverno policies depend on match and exclude details and on controller configuration, so check the official page for the curriculum that applies and read the documentation for that version.

A retake is covered by the stated policy, but treat the first attempt as the real one and use the weights above to decide where your remaining study time goes.

A 3-week KCA study plan

This 3-week plan orders the KCA domains by how much of the exam they carry and how much each one builds on the others. Each week has one focus, and the table lists the domains it covers. The intent is to read the official material for a domain, then answer practice questions on it, then read the explanations for every miss. Adjust the pace to your background: someone who already works with the technology daily can compress it, and someone new to it should stretch each week. Keep a short list of the questions you missed and reread it on the last day, since repeated misses mark the real gaps.

Spend roughly the same share of time on a domain as it carries in the exam, then add extra time wherever your practice accuracy is lowest. In GoldenKube you can focus on a single domain, or let smart practice pick the domain where you are weakest.

In the last few days, stop learning new material. Run mixed practice, review only the questions you missed, and sleep properly before the exam.

Resources

Start from the official KCA certification page, which holds the current domain list, the fee and the booking link. For the subject itself, use the project's own documentation, Kyverno documentation (kyverno.io), which is the best single source for terminology and behaviour. Then use GoldenKube practice questions on the KCA practice page to test recall, and revisit the documentation for every explanation that surprised you. Official pages are the source for facts that can change, such as the fee and the format, so check them again in the week you book. The links are listed below this section, and each fact in this guide was checked against them on the date shown above.

• Official KCA certification page and exam details on the Linux Foundation site.
• Kyverno documentation (kyverno.io).
• GoldenKube KCA practice questions, free to start with 10 guest answers.

Frequently asked questions