Practice
Learn at your own pace. Answer questions one at a time with instant feedback and explanations.
Start practiceCertified Kubernetes Security Specialist (CKS)
The CKS is a hands-on, performance-based certification that validates skills in securing container-based applications and Kubernetes platforms during build, deployment, and runtime.
Mock exam
Simulate the real thing. Take a timed, full-length test and review your score and weak areas.
Sign up to startStudy your way: beyond Practice and Mock exam, choose adaptive, hard mode, ready review, objective coverage, or retry-your-misses — and set your own question count, timer, and pass mark.
About this exam
CKS is a performance-based exam certifying that candidates have the skills, knowledge, and competence to secure container-based applications and Kubernetes platforms at build, deployment, and runtime. A valid CKA certification is required to sit the exam.
Who should take this exam
Kubernetes administrators and security engineers responsible for hardening clusters and workloads who already hold the CKA certification.
Career benefits
CKS demonstrates advanced Kubernetes security expertise valued for platform security, cloud security engineer, and senior DevOps roles.
How to prepare
Hold a current CKA, study the CNCF CKS curriculum, and practice cluster hardening, supply chain security, runtime security tools like Falco, and policy enforcement in a live cluster.
Quick facts
Exam costUSD 445
Valid for2 years
Length120 minutes
Passing score67%
FormatOnline proctored, hands-on performance-based exam against live Kubernetes clusters via a command-line terminal. Requires an active CKA certification.
Practice questions105
Objectives6
Official pageView
What's covered
1. Cluster Setup
15%Network policies, CIS benchmarks, Ingress TLS, securing node metadata and endpoints, and verifying platform binaries.
2. Cluster Hardening
15%Restricting API access with RBAC, minimizing service account permissions, and keeping Kubernetes up to date.
3. System Hardening
10%Minimizing host OS footprint and IAM roles, restricting access, and using kernel hardening tools like AppArmor and seccomp.
4. Minimize Microservice Vulnerabilities
20%Security contexts, Pod Security Standards, secrets management, container runtime sandboxes, and mutual TLS between Pods.
5. Supply Chain Security
20%Minimizing base image footprint, securing the supply chain, image scanning, and validating artifacts and signatures.
6. Monitoring, Logging and Runtime Security
20%Behavioral analytics, runtime detection with tools like Falco, immutability of containers, and audit logging.
Frequently asked questions
Are these real exam questions?
No. These are original practice questions written to match the exam objectives, each with an explanation so you actually learn the material — not exam dumps.
How does practice mode work?
You answer questions one at a time with instant feedback and explanations. Over time the app adapts, prioritizing the objectives and questions you struggle with most.
What is a mock exam?
A timed, full-length simulation that holds feedback until the end, then shows your score, pass/fail result, and a breakdown by objective.
Can I customize how I study?
Yes. Pick the study mode that fits — adaptive practice, hard mode, ready-for-review, objective coverage, or retrying questions you've missed — and set your own question count, timer, and passing score for each session.
Do I need an account?
You can try free questions for this exam without signing in. Create a free account to save your progress, track weak objectives, and unlock the full question bank.