LINUX FOUNDATION

Certified Kubernetes Security Specialist (CKS)

CKS

The Certified Kubernetes Security Specialist (CKS) certification validates advanced, hands-on skills in securing Kubernetes clusters and cloud-native workloads. Designed for experienced Kubernetes practitioners, it covers cluster hardening, supply chain security, and runtime threat detection. Earning CKS proves you can implement and maintain robust security controls in production environments, making you a valuable asset for security-focused DevOps and SRE roles.

Practice Free Questions

6Domains

26Objectives

123Practice pages

566Free questions

CKS free practice questions

Choose any objective and open any question page — no sign-in required.

Secure Cluster Components

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Network Security

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Access Control

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Workload and Data Security

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Minimize base image footprint

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Secure your supply chain (permitted registries, sign and validate artifacts, etc.)

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Minimize host OS footprint (reduce attack surface)

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Using least-privilege identity and access management

11 questions · 3 pages

Questions 1–5 6–10 11–11

Minimize external access to the network

15 questions · 3 pages

Questions 1–5 6–10 11–15

Appropriately use kernel hardening tools such as AppArmor, seccomp

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Perform behavioral analytics to detect malicious activities

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

Detect threats within physical infrastructure, apps, networks, data, users and workloads

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

Investigate and identify phases of attack and bad actors within the environment

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

Ensure immutability of containers at runtime

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Use Kubernetes audit logs to monitor access

15 questions · 3 pages

Questions 1–5 6–10 11–15

Minimize host OS footprint (reduce attack surface)

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Using least-privilege identity and access management

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

Minimize external access to the network

10 questions · 2 pages

Questions 1–5 6–10

Appropriately use kernel hardening tools such as AppArmor, seccomp

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

Perform behavioral analytics to detect malicious activities

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Detect threats within physical infrastructure, apps, networks, data, users and workloads

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Investigate and identify phases of attack and bad actors within the environment

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Ensure immutability of containers at runtime

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Use Kubernetes audit logs to monitor access

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (26 objectives · 123 pages).

Certified Kubernetes Security Specialist (CKS)

CKS free practice questions

Domain 1 · Cluster Setup17% of practice bank · 4 objectives · 94 questions17%

Domain 2 · Minimize Microservice Vulnerabilities17% of practice bank · 4 objectives · 95 questions17%

Domain 3 · Cluster Hardening13% of practice bank · 4 objectives · 72 questions13%

Domain 4 · Supply Chain Security20% of practice bank · 5 objectives · 115 questions20%

Domain 5 · System Hardening14% of practice bank · 4 objectives · 79 questions14%

Domain 6 · Monitoring, Logging and Runtime Security20% of practice bank · 5 objectives · 111 questions20%