← Catalog
Advanced 4 sections 4 × 30 min k8s 1.35

CKA · Starkiller

18 questions in four 30-minute sections, 100 points. Score above 70% to unlock the next. The final boss: constraints, multi-fault control planes, cross-namespace Gateway API.

Subscription required

€15/month this summer, instead of €20. Cancel anytime. Retakes included while subscribed.

Sign in to open CKA · Starkiller

18 weighted questions, 100 points, four 30-minute sections. Section 1 is open; score above 70% to unlock the next. etcd snapshot and restore to a new data dir, a worker upgrade under a PDB, an API server with two faults, scheduling without the default scheduler, RBAC debugging and aggregation, ServiceAccount tokens, NetworkPolicy debugging, CoreDNS stub zones, HTTPS Gateway with redirects and ReferenceGrants, volume expansion, in-place Pod resize, a Helm rollback, metrics-server, topology spread, TLS hardening, a stuck namespace and crictl. Real kubeadm clusters in the browser. The timer keeps running if you close the tab.

Questions, terminal and scoring stay in English, like the official CKA.

Aligned with CKA on Kubernetes 1.35. Last reviewed 14 Aug 2026.

Sections

4 sections
  1. 01 Section 1 — Q1–Q4, 30 minutes Lock
  2. 02 Section 2 — Q5–Q8, 30 minutes Lock
  3. 03 Section 3 — Q9–Q13, 30 minutes Lock
  4. 04 Section 4 — Q14–Q18, 30 minutes Lock

What you practice

  • 25%
    Cluster Architecture, Installation and Configuration etcd restore to a new data dir, worker upgrade under a PDB, RBAC aggregation, SA tokens, Helm rollback.
  • 15%
    Workloads and Scheduling Manual and custom schedulers, in-place resize, topology spread constraints.
  • 20%
    Services and Networking NetworkPolicy debugging, CoreDNS stub zones, HTTPS Gateway with ReferenceGrants.
  • 10%
    Storage Volume expansion and ReadWriteOncePod on a CSI driver.
  • 30%
    Troubleshooting API server with two faults, metrics-server, a stuck namespace, crictl, cluster reports.

FAQ

What is on this exam?

18 questions, 100 points, four 30-minute sections. Constraints and multi-fault tasks: etcd restore, PDB-protected upgrade, two-fault API server, custom scheduler, NetworkPolicy debugging, Gateway API ReferenceGrants, CSI expansion, in-place resize. Section 1 is open; score above 70% to unlock the next.

How many questions?

18 weighted questions, 100 points, four 30-minute sections.

Can I pause the timer?

No. Each section is 30 minutes and keeps running even if you close the tab — same idea as exam day.

How is scoring done?

The clusters are graded for you about every five minutes, and you can request a score anytime. Partial credit is per subtask.

What does the lab look like?

A real kubeadm cluster (one control plane, three workers, Calico) plus small extra clusters for the questions that break a control plane. You work from a base terminal and ssh into nodes, like on exam day.