KCSA Mock Exam and Practice Questions

Practise for the Kubernetes and Cloud Native Security Associate exam with mock exams in its real format: 60 multi-choice questions, 90 minutes and a 75% pass mark, with an explanation for every option. Kubernetes security, threat modeling, and compliance.

KCSA is one of the 5 Kubestronaut certifications and one of the 16 required for Golden Kubestronaut. See the full Golden Kubestronaut list →

KCSA exam domains and topics

The official KCSA curriculum splits the exam into 6 weighted domains. Under each are the competencies it lists — the topics the mock exams here are written against.

• Overview of Cloud Native Security 14% · ~8 questions
  • The 4Cs of Cloud Native Security
  • Cloud Provider and Infrastructure Security
  • Controls and Frameworks
  • Isolation Techniques
  • Artifact Repository and Image Security
  • Workload and Application Code Security
• Kubernetes Cluster Component Security 22% · ~13 questions
  • API Server
  • Controller Manager
  • Scheduler
  • Kubelet
  • Container Runtime
  • KubeProxy
  • Pod
  • Etcd
  • Container Networking
  • Client Security
  • Storage
• Kubernetes Security Fundamentals 22% · ~13 questions
  • Pod Security Standards
  • Pod Security Admissions
  • Authentication
  • Authorization
  • Secrets
  • Isolation and Segmentation
  • Audit Logging
  • Network Policy
• Kubernetes Threat Model 16% · ~10 questions
  • Kubernetes Trust Boundaries and Data Flow
  • Persistence
  • Denial of Service
  • Malicious Code Execution and Compromised Applications in Containers
  • Attacker on the Network
  • Access to Sensitive Data
  • Privilege Escalation
• Platform Security 16% · ~10 questions
  • Supply Chain Security
  • Image Repository
  • Observability
  • Service Mesh
  • PKI
  • Connectivity
  • Admission Control
• Compliance and Security Frameworks 10% · ~6 questions
  • Compliance Frameworks
  • Threat Modelling Frameworks
  • Supply Chain Compliance
  • Automation and Tooling

Questions per domain are the official weight applied to the exam's 60 questions, rounded.

A free KCSA sample question

What is in the KCSA mock exams

• 3 full mock exams of 60 questions each: 180 original questions across all 6 domains.
• Exam simulation on the real 90-minute timer, with your score and a breakdown by domain at the end.
• Practice mode with the explanation after every answer, plus domain drills and a review of the questions you missed.
• The full mocks need a paid plan; the sample question on this page is free.

Prerequisites and background knowledge

KCNA or equivalent Kubernetes knowledge. Familiarity with basic security concepts (TLS, RBAC, network policies).

Official reference: cncf.io/training/certification/kcsa.

More KCSA practice resources

Where to go after KCSA

Once you pass KCSA, these certs are natural next steps on the Golden Kubestronaut path: