CKS
Certified Kubernetes Security Specialist
CNCF
Exam facts
- Length on exam day: 120 minutes
- Questions on exam day: 15–20 tasks
- Passing score: 67% or higher
- Practice access: $29 for 6 months
About this exam
Knowledge-check practice for the Kubernetes security specialist curriculum: cluster setup, hardening, system hardening, microservice vulnerabilities, supply chain security, and runtime monitoring. The real exam is hands-on in a terminal, so use these questions together with live cluster practice. Requires an active CKA to sit the exam.
Suggested study plan
Pass CKA first. Then practice NetworkPolicy, RBAC, and service account hardening on a real cluster, followed by Pod Security Standards, AppArmor and seccomp, image scanning and admission control, and audit logs and runtime detection tools. Use the simulator that comes with the exam registration.
Domains
- Cluster Setup15%
- Cluster Hardening15%
- System Hardening10%
- Minimize Microservice Vulnerabilities20%
- Supply Chain Security20%
- Monitoring, Logging and Runtime Security20%
FAQ
- Is CKS part of Kubestronaut?
- Yes. Kubestronaut requires KCNA, KCSA, CKA, CKAD and CKS to be held at the same time.
- Is CKS multiple choice?
- No. The real exam is performance-based, solved from a command line. These questions test the knowledge behind the tasks and do not replace hands-on practice.
- Are these questions from the live exam?
- No. They are original practice items written from the Linux Foundation and CNCF published curriculum.