examquestions.com

CKS

Certified Kubernetes Security Specialist

CNCF

Original practice questionsExplanations included3 freeOfficial objectives ↗

Exam facts

  • Length on exam day: 120 minutes
  • Questions on exam day: 15–20 tasks
  • Passing score: 67% or higher
  • Practice access: $29 for 6 months

Practice bank

10 published questions (3 free samples).

About this exam

Knowledge-check practice for the Kubernetes security specialist curriculum: cluster setup, hardening, system hardening, microservice vulnerabilities, supply chain security, and runtime monitoring. The real exam is hands-on in a terminal, so use these questions together with live cluster practice. Requires an active CKA to sit the exam.

Suggested study plan

Pass CKA first. Then practice NetworkPolicy, RBAC, and service account hardening on a real cluster, followed by Pod Security Standards, AppArmor and seccomp, image scanning and admission control, and audit logs and runtime detection tools. Use the simulator that comes with the exam registration.

Domains

  • Cluster Setup15%
  • Cluster Hardening15%
  • System Hardening10%
  • Minimize Microservice Vulnerabilities20%
  • Supply Chain Security20%
  • Monitoring, Logging and Runtime Security20%

FAQ

Is CKS part of Kubestronaut?
Yes. Kubestronaut requires KCNA, KCSA, CKA, CKAD and CKS to be held at the same time.
Is CKS multiple choice?
No. The real exam is performance-based, solved from a command line. These questions test the knowledge behind the tasks and do not replace hands-on practice.
Are these questions from the live exam?
No. They are original practice items written from the Linux Foundation and CNCF published curriculum.

Sources