Complete, hands-on-focused prep for the CNCF Certified Kubernetes Security Specialist (CKS) exam. Covers the full curriculum: cluster setup (the 4 Cs, CIS benchmarks with kube-bench, NetworkPolicies, and Ingress TLS); cluster hardening (RBAC least privilege, service-account hygiene, and API-server hardening); system hardening (seccomp, AppArmor, dropping capabilities, and reducing attack surface); minimizing microservice vulnerabilities (Pod Security Standards, secrets and etcd encryption, sandboxed runtimes with gVisor/Kata, and mTLS); supply-chain security (minimal/distroless images, scanning with Trivy, SBOMs, signing with cosign, and admission control via Kyverno/OPA Gatekeeper); and monitoring, logging and runtime security (behavioral detection with Falco, audit logging, and container immutability). Includes exam-trap callouts, per-domain mastery checks, a 50-question mock, a full-length 125-question exam simulator, and a spaced-repetition flashcard deck. CKS is a performance-based, two-hour exam solved in live clusters and requires a valid CKA — this course builds the conceptual fluency behind that speed; pair it with hands-on practice using kube-bench, Trivy, Falco, and admission policies.
0.00 USD
Create a free account to preview lessons. Browse all courses.