KCA Mock Exam Simulator

Free Kyverno Certified Associate practice questions with full explanations on every option. Kubernetes policy management with Kyverno.

Format

multi-choice

Duration

90 min

Pass mark

75%

Study time

1–6 wks

KCA exam domains

Fundamentals of Kyverno 18%
Installation, Configuration, and Upgrades 18%
Kyverno CLI 12%
Applying Policies 10%
Writing Policies 32%
Policy Management 10%

A free KCA sample question

Fundamentals of Kyverno

Q1. Which statement about Kyverno and OCI images is accurate?

A Kyverno stores its own internal state as OCI artifacts in the cluster etcd.
Incorrect. Kyverno stores its state as Kubernetes resources, not as OCI artifacts in etcd.
B Kyverno rewrites image digests so that every Pod always uses the latest tag.
Incorrect. Kyverno does not force latest tags; rewriting to latest would be an anti-pattern.
C Kyverno requires a custom container runtime that understands Kyverno metadata labels.
Incorrect. Kyverno works with any CRI-compliant runtime and does not require special runtime support.
D Kyverno verifies OCI image signatures using Cosign/Sigstore via verifyImages.
Correct. verifyImages rules integrate Cosign/Sigstore (and Notary) to verify signatures, attestations, and attestors on OCI images.

Reveal answer and explanations

Start the full KCA mock exam90-min timer · paid plan required

Prerequisites and background knowledge

Kubernetes RBAC and admission controller concepts. Understanding of Kubernetes resource schemas (Pod spec, labels, annotations).

Official reference: cncf.io/training/certification/kca.

More KCA practice resources

KCA exam tips

Where to go after KCA

Once you pass KCA, these certs are natural next steps on the Golden Kubestronaut path:

KCSA — Kubernetes and Cloud Native Security Associate CNPA — Certified Cloud Native Platform Engineering Associate

Frequently asked questions about KCA

What is the passing score for KCA?

75%.

How long is the KCA exam?

90 minutes, multi-choice format. See the official CNCF page for the current question count.

How difficult is the KCA exam?

Rated intermediate. Plan 1–6 weeks depending on your background.

How much does the KCA exam cost?

Pricing changes periodically — check the official CNCF KCA page at https://www.cncf.io/training/certification/kca/.

Are these KCA mock exams free?

The sample question on this page is free with no account. Full timed KCA mocks require a paid plan.

How is this mock exam different from the real KCA exam?

Original questions written against the official CNCF curriculum — not scraped dumps. Format mirrors the real exam; the real one is proctored, these are self-paced.

What is the best way to study for KCA?

Work through the official curriculum in order of domain weight (heaviest first), then run full timed mocks until you hit 85%+ consistently.