Certified Kubernetes Security Specialist (CKS) Study Guide 2026: Syllabus, Exam Topics & Study Plan -Edureify
📋 2026 Edition  ·  Updated November 2026

Certified Kubernetes Security Specialist (CKS) Study Guide 2026

Complete exam coverage for the Certified Kubernetes Security Specialist (CKS): syllabus, domains, key topics, study plan and practical exam preparation strategy.

15-20
Questions
120 min
Duration
67
Passing score
6
Domains
Start Practice Test & Get My Study Plan Take Readiness Diagnostic
95%
First-attempt pass rate
47K+
Candidates prepared
4.9★
Average rating
"Passed my Certified Kubernetes Security Specialist (CKS) exam on the first try after just 6 weeks of studying with Edureify AI. The domain-level analysis showed me exactly what I was missing."
- Verified Edureify User
Your readiness score - take the free diagnostic to unlock your personalised analysis
-%
Overall readiness (locked)
Cluster Setup
-
Cluster Hardening
-
System Hardening
-
Minimize Microservice Vulnerabilities
-
Supply Chain Security
-
Monitoring, Logging and Runtime Security
-
Run 10-Minute Free Diagnostic →
Exam at a Glance

Certified Kubernetes Security Specialist (CKS) Exam Overview

Key facts about the Certified Kubernetes Security Specialist (CKS) exam structure, format and scoring.

🆔
cks
Exam code
📝
15-20 questions
Total questions
⏱
120 minutes
Duration
🎯
67
Passing score
📋
6 domains
Exam domains
🏆
Certification
Credential type
ℹ️
Scoring method: Tasks are performance-based and scored automatically, with tasks weighted differently; a score of 67% or higher passes. The score report is emailed within 24 hours of completing the exam.. The exam may include unscored pilot questions - treat every question seriously.
Focus Areas

What should you study for the Certified Kubernetes Security Specialist (CKS) exam?

Start with the domains that make up the Certified Kubernetes Security Specialist (CKS) exam. Use the detailed syllabus below to work through the individual topics.

⚠️
Common mistake: Candidates often memorise terminology but struggle with scenario-based questions. Focus on when to use what, not just what exists.
🔐
Cluster Setup (15%)
Restricting cluster access, benchmarking components, securing Ingress and node endpoints and verifying binaries.
🏗
Cluster Hardening (15%)
Using RBAC, restricting service accounts and API access, and upgrading Kubernetes.
⚡
System Hardening (10%)
Minimizing host OS footprint and network exposure and using least-privilege IAM and kernel hardening tools.
💰
Minimize Microservice Vulnerabilities (20%)
Applying Pod Security Standards, managing secrets, isolation and Pod-to-Pod encryption.
🔄
Supply Chain Security (20%)
Minimizing images, understanding and securing the supply chain and static analysis of workloads and images.
📊
Monitoring, Logging and Runtime Security (20%)
Behavioral analytics, threat detection, attack investigation, container immutability and audit logging.
Full Syllabus

Certified Kubernetes Security Specialist (CKS) Exam Syllabus and Topics

The Certified Kubernetes Security Specialist (CKS) exam is divided into 6 domains. Each domain covers specific skills and topics. Expand a domain to see the detailed syllabus.

Network and Ingress Security
NetworkPolicies to restrict cluster-level access
Ingress with TLS
Protecting node metadata and endpoints
Default deny policies
Benchmarks and Binaries
CIS Benchmark review with kube-bench
Securing etcd, kubelet and kube-apiserver configuration
Verifying platform binaries with checksums
Fixing benchmark findings
~3 questions
15 marks
15% of exam weight
Access Control
RBAC Roles and ClusterRoles to minimize exposure
Disabling default service account token automount
Minimizing service account permissions
Restricting access to the Kubernetes API
Upgrades
Upgrading Kubernetes with kubeadm
Draining and upgrading nodes
Version skew policy
Patching known vulnerabilities
~3 questions
15 marks
15% of exam weight
Host Hardening
Minimizing host OS footprint
Disabling unneeded services and packages
Least-privilege identity and access management
Minimizing external network access
Kernel Hardening
AppArmor profiles
seccomp profiles
Applying profiles in Pod specs
RuntimeDefault seccomp
~2 questions
10 marks
10% of exam weight
Pod Security
Pod Security Standards and Pod Security Admission
SecurityContexts
Managing Kubernetes Secrets
Encrypting Secrets at rest
Isolation and Encryption
Multi-tenancy isolation
Sandboxed containers with gVisor and RuntimeClass
Pod-to-Pod encryption with Cilium or Istio
mTLS
~4 questions
20 marks
20% of exam weight
Image Security
Minimizing base image footprint
Image vulnerability scanning with Trivy
Permitted registries
Image digests and tags
Supply Chain Controls
SBOMs
Signing and validating artifacts
Admission control with ImagePolicyWebhook
Static analysis with Kubesec and KubeLinter
~4 questions
20 marks
20% of exam weight
Threat Detection
Behavioral analytics with Falco
Detecting threats across infrastructure, apps and workloads
Investigating phases of attack
Identifying bad actors
Runtime Controls and Auditing
Immutable containers with readOnlyRootFilesystem
Kubernetes audit policies
Enabling audit logging on kube-apiserver
Analyzing audit logs
~4 questions
20 marks
20% of exam weight
🔥 1,247 professionals tested in the last 24 hours

Know if you'll pass Certified Kubernetes Security Specialist (CKS) before exam day

Take our 10-minute diagnostic and get a personalised report showing your readiness, weak domains and where to focus next.

Start Free Diagnostic →
100% FreeNo credit cardResults in 10 minutes
Study Plan

Certified Kubernetes Security Specialist (CKS) Structured Study Roadmap

Choose a preparation timeline based on how much time you have available. For a plan based on your actual readiness and weak domains, use the personalised Edureify study experience. Get My Training Plan →

Weeks 1-2
Core Services + Highest-Weighted Domain
Deep-dive into the most heavily tested domain. Spend more time here when its exam weight is significantly higher.
Official exam guideDomain 1 completeCore conceptsPractice questions
Week 3
Domain 2 - Hands-on Practice
Focus on scenario-based study and reinforce concepts through practical application where applicable.
Domain 2Scenario walkthroughsHands-on practicePractice questions
Week 4
Domain 3 - Deeper Concepts
Work through complex concepts and decision scenarios.
Domain 3Scenario drillsPractice examReview
Week 5
Remaining Domains + Weak Area Targeting
Identify your weaker domains and spend focused time closing those gaps.
Remaining domainsDiagnosticTargeted reviewStudy notes
Week 6
Full Simulations + Final Preparation
Use timed simulations to test your preparation and review the reasoning behind incorrect answers.
Full mock examsWrong-answer reviewFinal reviewExam logistics
Exam Strategy

Tips to pass Certified Kubernetes Security Specialist (CKS) on your first attempt

Practical advice for applying what you know, managing questions and preparing for exam conditions.

🗓
You must hold a passed CKA before you can sit the CKS.
🔍
Supply Chain Security, Microservice Vulnerabilities and Runtime Security are 20% each; practise Trivy scans, Pod Security Admission, Falco rules and audit policies.
⏭
Back up static Pod manifests before editing kube-apiserver flags, and confirm the API server restarts before moving on.
📊
Always switch to the context named in each task and prioritise high-weight tasks when time is short.
🔁
The CKS environment runs Kubernetes v1.35, so use current API versions and flags.
Recommended Resources

Certified Kubernetes Security Specialist (CKS) Study Resources

Use a focused set of resources alongside the study guide rather than trying to study from everything available.

Official
Official Exam Guide
Start with the authoritative exam objectives and blueprint.
→ Vendor website
Practice Tests
Certified Kubernetes Security Specialist (CKS) Practice Test
Practice questions with explanations and domain-level performance analysis.
→ Start free practice test
Mock Exam
Certified Kubernetes Security Specialist (CKS) Mock Exam
Timed preparation under realistic exam-style conditions.
→ Take free mock exam
Training
Certified Kubernetes Security Specialist (CKS) Certification Training
Structured preparation with personalised learning support and adaptive practice.
→ Certified Kubernetes Security Specialist (CKS) certification online training
AI Tutor
Certified Kubernetes Security Specialist (CKS) AI Tutor
Get help understanding concepts and work on weak areas with AI-powered learning support.
→ Try Certified Kubernetes Security Specialist (CKS) AI tutor
Reference
Certified Kubernetes Security Specialist (CKS) Cheat Sheet
Quick-reference summaries for final revision.
→ Get free cheat sheet
Diagnostic
Certified Kubernetes Security Specialist (CKS) Readiness Test
Assess your preparation and identify weaker exam domains.
→ Check my readiness
⚠️
Avoid brain dumps. Sites selling real or stolen exam questions may violate certification-provider rules and can leave candidates studying outdated material.
Reviews

What candidates say after passing

FAQ

Frequently asked questions about Certified Kubernetes Security Specialist (CKS)

Most candidates with relevant background can structure their preparation over several weeks, depending on their existing knowledge, available study time and exam difficulty. Use the study roadmap above as a starting point and use the readiness diagnostic to identify where you need more preparation.
The guide covers the exam overview, domains, detailed syllabus and topics, study roadmap, exam preparation tips and links to practice, mock, readiness, cheat-sheet, AI Tutor and training resources.
The guide is designed to organize your preparation around the exam syllabus. You should combine it with practice questions and timed simulations so that you can test both your knowledge and your ability to apply it.
Yes. Start with the exam overview and domain breakdown, then work through the detailed topics using the study roadmap. Candidates with less experience may need additional time for foundational concepts.
Take the Edureify readiness diagnostic to assess your preparation and identify the domains where you need to focus more.
Edureify AI can help explain concepts, identify weaker areas from practice performance and support a more personalised preparation process.

Ready to prepare for Certified Kubernetes Security Specialist (CKS)?

Find your weak areas and build a more focused preparation plan.

Start My Free Diagnostic →
95% first-attempt pass rate47,000+ candidates4.9★ ratingNo credit card needed
Keep Learning

Related DevOps & Containers Certification Study Guides

Explore related certification study guides within this category.

devops-containers↗
Certified Kubernetes Administrator
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
Kubernetes and Cloud Native Associate
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
Certified Kubernetes Application Developer
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
Certified Kubernetes Security Specialist
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
AWS DevOps Engineer - Professional
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
Azure DevOps Engineer AZ-400
Study guide, syllabus, exam domains and preparation plan.
View study guide →
devops-containers↗
Google Cloud Professional DevOps Engineer
Study guide, syllabus, exam domains and preparation plan.
View study guide →