CCA question bank coverage by exam domain
Last updated
The GoldenKube CCA bank is a compact bank spread fairly evenly across the eight official Cilium domains. That evenness makes Architecture, the heaviest exam domain, under-covered, while Installation and Configuration gets more room than its weight. Every question is explained. The table shows the live numbers.
| Official domain | Weight | Questions | Share | Gap (pts) | Explained | Topic pages |
|---|---|---|---|---|---|---|
| Architecture | 20% | 15 | 15% | −5.3 | 15 | 1 |
| Network Policy | 18% | 15 | 15% | −3.3 | 15 | 1 |
| Service Mesh | 16% | 16 | 16% | −0.3 | 16 | 1 |
| Network Observability | 10% | 13 | 13% | +2.7 | 13 | 1 |
| Installation and Configuration | 10% | 15 | 15% | +4.7 | 15 | 1 |
| Cluster Mesh | 10% | 12 | 12% | +1.8 | 12 | 0 |
| eBPF | 10% | 8 | 7.8% | −2.2 | 8 | 0 |
| BGP and External Networking | 6% | 8 | 7.8% | +1.8 | 8 | 1 |
| Whole bank | 100% | 102 | 100% | — | 102 | 6 |
Counts read from the live CCA bank. Weights as published on the official certification page, checked .
What the table measures
Each row is one official CCA exam domain, in the order and with the weight the Linux Foundation publishes. The question count is read from the GoldenKube CCA bank when the page is served, so it always matches what you can practise today. Share is that count divided by the whole bank, and the gap column is the share minus the official weight, in percentage points: a positive gap means the bank has more questions on that domain than the exam weight alone would suggest, a negative gap means fewer. Explained counts the questions that come with a written explanation, and topic pages counts the public topic pages built from that domain.
Some bank sets use their own domain names; those are mapped to the official domain they cover. Mixed practice sets that span several domains are not forced into one row and are listed separately, which is why the official rows can add up to less than the whole bank.
The weights describe the exam, not this bank. A gap is not an error in the exam or in your preparation, it only tells you where practising here gives you more or less material than the exam is likely to ask about.
Where the CCA bank leans
Architecture is the clearest gap: it has the largest exam weight but about as many bank questions as several lighter domains, so its share falls below the weight. Network Policy is a little under as well, without crossing the threshold. Installation and Configuration is the one domain clearly over its weight. The remaining domains, from Service Mesh and Cluster Mesh to eBPF and BGP, are close to their weights. With a small bank, one or two questions move a share by a noticeable amount, so read the small gaps as rough rather than exact.
Several bank sets use longer names such as Architecture and Installation or Service Mesh and Gateway API; each is mapped to the official domain it covers, so some official rows combine two bank subdomains.
How to use this when you practise CCA
Treat the CCA bank as a check rather than a full course. Work through Architecture questions early and back them with the Cilium documentation on the agent, operator, the eBPF datapath and identity-based policy, since the exam asks more about them than the bank can. Because the bank is small, reaching mastered on every domain is realistic; once you have, the exam guide lists what to read next.
Sources
Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation.