Cilium Certified Associate (CCA)

Cilium Certified Associate (CCA)

The Cilium Certified Associate (CCA) certification is a beginner-friendly credential that proves you understand the key principles of modern Kubernetes networking, security, and observability using Cilium — one of the most widely adopted cloud-native networking technologies today. This certification helps professionals stand out by demonstrating solid foundational knowledge of how Cilium works within Kubernetes environments.

Who should take this Certification?

This credential is perfect for:

• Platform engineers
• Cloud engineers
• DevOps professionals
• Site Reliability Engineers (SREs)
• Kubernetes administrators
• Networking and security engineers
• Anyone building or maintaining Kubernetes environments who wants to understand how Cilium adds value

It’s especially relevant if you already have basic Kubernetes knowledge or certifications (like KCNA, CKA, or CKAD), and you want to expand into networking and security.

Skills Required Before Taking the Exam

Ideally, candidates will have:

• Practical familiarity with Kubernetes fundamentals
• A basic grasp of container networking concepts
• Awareness of cloud-native architecture
• General knowledge of DevOps workflows
• There are no formal prerequisites, but hands-on experience makes preparation easier and more effective.

Knowledge you will gain

After completing your study and passing the CCA exam, you’ll be able to:

• Describe Cilium’s role within Kubernetes networks
• Explain the architecture and components of Cilium
• Understand how Cilium uses eBPF for more efficient networking
• Read and interpret Cilium network policies
• Configure and secure network traffic in Kubernetes
• Use observability tools like Hubble to monitor services
• Recognize how Cilium supports service mesh and multi-cluster connectivity
• Apply best practices for deploying Cilium in real environments
• This puts you in a strong position to contribute to secure, observable, and scalable Kubernetes deployments.

Detailed Course / Exam Outline

The Cilium Certified Associate (CCA) Exam covers the following topics - 

Domain 1. Cilium Architecture (20%)

• What Cilium does in Kubernetes
• Core components like Cilium agents and datapath models
• IPAM and the role of each component
• How eBPF changes networking performance

Domain 2. Network Policy (18%)

• Identity-based security model
• Writing and enforcing CiliumNetworkPolicies
• Differences from standard Kubernetes NetworkPolicies

Domain 3. Service Mesh (16%)

• Using Ingress or Gateway API with Cilium
• Service mesh capabilities and encrypted traffic
• Sidecar vs. sidecarless architectures

Domain 4. Network Observability (10%)

• Using Hubble to observe traffic and events
• Enabling Layer-7 visibility
• CLI and UI observability tools

Domain 5. Installation & Configuration (10%)

• Cilium CLI basics
• Installing Cilium and verifying health
• Configuration changes and connectivity tests

Domain 6. Cluster Mesh (10%)

• Benefits of Cluster Mesh for multi-cluster networking
• Service discovery and load balancing across clusters

Domain 7. eBPF (10%)

• What eBPF is and why it matters
• Comparing eBPF vs traditional Linux networking models

Domain 8. External Networking & BGP (6%)

• Egress traffic handling
• Integrating Kubernetes clusters with external networks

Exam Details

• Format: Online, proctored, multiple-choice questions
• Duration: Roughly 90 minutes
• Level: Entry-level to beginner-friendly
• Focus: Conceptual and practical understanding, not deep configuration skills