Skip to content

Hardest KCSA topics, from learners' first answers

Last computed

These are the KCSA subdomains where GoldenKube learners most often got their first answer wrong. 96 learners gave 882 first answers on KCSA; subdomains with fewer than 20 answers are left out.

KCSA subdomains by wrong rate on first answers
SubdomainWrong rateLast 90 daysAnswersLearners
Cloud Provider and Infrastructure SecurityCloud Native Security88%88%4845
Controls and FrameworksCloud Native Security85%85%4035
Artifact Repository and Image SecurityCloud Native Security85%85%9984
EtcdKubernetes Cluster Component Security82%82%4517
Isolation TechniquesCloud Native Security79%79%2920
Kubernetes Trust Boundaries and Data FlowKubernetes Threat Model63%63%244
Workload and Application Code SecurityCloud Native Security61%61%2820
API ServerKubernetes Cluster Component Security54%54%245
Pod Security AdmissionsKubernetes Security Fundamentals52%52%334
Compliance FrameworksCompliance and Security Frameworks43%43%239
ObservabilityPlatform Security43%43%233
The 4Cs of Cloud Native SecurityCloud Native Security43%43%2320
Network PolicyKubernetes Security Fundamentals36%36%254
AuthorizationKubernetes Security Fundamentals14%14%215

How these numbers are made

Every answer given in GoldenKube practice is stored. Once a day the answers are aggregated per subdomain, and only each learner's first answer to each question counts, so the review repeats of a missed question do not push its topic up the list. The wrong rate is the share of those first answers that were wrong. The last-90-days column repeats the calculation for first answers given in the past 90 days.

Read the table with two limits in mind. The learners are self-selected: people who chose to practise KCSA here, at every stage of preparation, not a sample of exam candidates. And practice is not the exam: a high wrong rate can mean a hard topic, a hard set of questions in this bank, or both. It says nothing about how the real exam is scored.

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation.