Certified Kubernetes Security Specialist (CKS) Exam Guide
📌 Exam Overview
The Certified Kubernetes Security Specialist (CKS) is a prestigious certification offered by the Linux Foundation and CNCF. It validates expertise in securing container-based applications and Kubernetes platforms across build, deployment, and runtime phases.
- Format: Online, proctored, performance-based (command-line tasks).
- Duration: 2 hours.
- Prerequisite: A valid Certified Kubernetes Administrator (CKA) certification.
- Official Site: Linux Foundation CKS
📖 Exam Topics & Weightage
The CKS exam covers various security aspects of Kubernetes:
1️⃣ Cluster Setup (10%)
- Secure network policies.
- Review CIS Kubernetes benchmarks.
- Secure Ingress setup (TLS).
- Protect node metadata and endpoints.
2️⃣ Cluster Hardening (15%)
- Implement RBAC to restrict access.
- Secure etcd, API server, and kubelet.
3️⃣ System Hardening (15%)
- Secure underlying OS and configurations.
4️⃣ Minimize Microservice Vulnerabilities (20%)
- Secure application images.
- Use security policies for workloads.
5️⃣ Supply Chain Security (20%)
- Secure software supply chain.
- Image signing and verification.
6️⃣ Monitoring, Logging, and Runtime Security (20%)
- Implement security logging and monitoring.
- Use tools like Falco, AppArmor, and seccomp.
💰 Exam Cost
- $395 USD
- Occasional discounts may be available.
📝 How to Schedule the Exam
- Check Prerequisites: Ensure you have an active CKA certification.
- Purchase Exam: Buy the exam from the Linux Foundation.
- Schedule the Exam: After purchase, you’ll get instructions to schedule it.
- Preparation: Utilize the Killer.sh exam simulator (two attempts, 36 hours each).
- Exam Day: Ensure:
- Stable internet connection.
- Quiet environment.
- Compliance with proctoring requirements.