Certified Kubernetes Security Specialist (CKS)
Unlimited CKS practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — cluster setup, cluster hardening, system hardening, minimizing microservice vulnerabilities, supply chain security, and monitoring/logging/runtime security. Aligned to CNCF CKS v1.32.
Exam mode Default
120-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 195-question pool — every attempt draws 65 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Ready to sit the real CKS exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Cluster Setup15%
- Use Network security policies to restrict cluster level access
- Use CIS benchmark to review the security configuration of Kubernetes components
- Properly set up Ingress with TLS
- Protect node metadata and endpoints
- Verify platform binaries before deploying
Cluster Hardening15%
- Use Role Based Access Controls to minimize exposure
- Exercise caution in using service accounts (disable defaults, minimize permissions)
- Restrict access to Kubernetes API
- Upgrade Kubernetes to avoid vulnerabilities
System Hardening10%
- Minimize host OS footprint (reduce attack surface)
- Use least-privilege identity and access management
- Minimize external access to the network
- Appropriately use kernel hardening tools such as AppArmor and seccomp
Minimize Microservice Vulnerabilities20%
- Use appropriate pod security standards
- Manage Kubernetes secrets
- Understand and implement isolation techniques (multi-tenancy, sandboxed containers, etc.)
- Implement Pod-to-Pod encryption (Cilium, Istio)
Supply Chain Security20%
- Minimize base image footprint
- Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)
- Secure your supply chain (permitted registries, sign and validate artifacts, etc.)
- Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)
Monitoring, Logging and Runtime Security20%
- Perform behavioral analytics to detect malicious activities
- Detect threats within physical infrastructure, apps, networks, data, users and workloads
- Investigate and identify phases of attack and bad actors within the environment
- Ensure immutability of containers at runtime
- Use Kubernetes audit logs to monitor access
References
- Official exam page:training.linuxfoundation.org
- Official study guide:github.com (PDF)
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with Linux Foundation, and we do not provide real exam dumps.