Question 1

What is the CKS exam?

Accepted Answer

The Certified Kubernetes Security Specialist (CKS) is an advanced, hands-on certification from the Linux Foundation and CNCF. It validates your ability to secure Kubernetes clusters and containerised workloads across areas including cluster hardening, supply chain security, and runtime threat detection. The exam is conducted entirely in a live terminal environment with no multiple-choice questions.

Question 2

Do I need the CKA to take the CKS?

Accepted Answer

Yes. A valid Certified Kubernetes Administrator (CKA) certification is a mandatory prerequisite for sitting the CKS exam. You must hold an active CKA at the time of your CKS exam registration. This requirement exists because the CKS builds directly on the foundational Kubernetes administration skills validated by the CKA.

Question 3

What is the passing score for the CKS?

Accepted Answer

The passing score for the CKS is 67%. Results are typically available within 24 hours of completing the exam. The exam fee includes one free retake if you do not pass on your first attempt.

Question 4

What topics does the CKS cover?

Accepted Answer

The CKS covers six domains: Cluster Setup (10%), Cluster Hardening (15%), System Hardening (15%), Minimise Microservice Vulnerabilities (20%), Supply Chain Security (20%), and Monitoring, Logging and Runtime Security (20%). Key topics include network policies, CIS benchmarks, Pod Security Admission, RBAC hardening, image scanning with Trivy, runtime security with Falco, seccomp profiles, AppArmor, and Kubernetes audit logging.

Question 5

How hard is the CKS compared to the CKA?

Accepted Answer

The CKS is widely considered more difficult than the CKA. While the CKA tests broad Kubernetes administration skills, the CKS requires deep knowledge of a specialised and complex domain. The security tooling involved (Falco, OPA, Trivy, AppArmor, and others) adds significant breadth, and the exam tasks tend to require more precise configuration. Most candidates recommend having substantial hands-on security experience before attempting the CKS.