Certified Kubernetes Security Specialist (CKS) Practice Test
Gana confianza para Certified Kubernetes Security Specialist (CKS). Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
El examen Certified Kubernetes Security Specialist (CKS) es una certificación basada en el rendimiento que valida la capacidad de un candidato para asegurar aplicaciones basadas en contenedores y plataformas Kubernetes durante la construcción, implementación y ejecución. Administrado por la Cloud Native Computing Foundation (CNCF) y la Linux Foundation, evalúa habilidades prácticas en la implementación de mejores prácticas de seguridad, el endurecimiento de componentes del clúster y la respuesta a amenazas en tiempo real dentro de un entorno de línea de comandos. Este examen está diseñado para administradores de Kubernetes experimentados, ingenieros de DevOps y profesionales de seguridad que son responsables de diseñar, construir y mantener infraestructuras de Kubernetes seguras. Al obtener el CKS, los profesionales demuestran una competencia práctica y neutral ante proveedores en el crítico dominio de la seguridad nativa de la nube, posicionándose como expertos capaces de proteger una de las plataformas de orquestación más adoptadas.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
Which audit policy level records the request body but not the response body?
Which annotation tells Kyverno that an image signature should be verified using a keyless Sigstore identity matching a GitHub Actions workflow?
Which Kubernetes object referenced by ESO (External Secrets Operator) maps a remote secret to a Kubernetes Secret?
Which Kubernetes pod field selects the desired RuntimeClass at scheduling time?
Which base image strategy minimizes attack surface and CVE exposure for compiled Go binaries?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.
01Minimize Microservice Vulnerabilities
Temas
- Use appropriate pod security standards
- Manage Kubernetes secrets
- Understand and implement isolation techniques (multi-tenancy, sandboxed containers, etc.)
- Implement Pod-to-Pod encryption (Cilium, Istio)
Objetivos de aprendizaje
- Use appropriate pod security standards
- Manage Kubernetes secrets
- Understand and implement isolation techniques (multi-tenancy, sandboxed containers, etc.)
- Implement Pod-to-Pod encryption (Cilium, Istio)
02Monitoring, Logging and Runtime Security
Temas
- Perform behavioral analytics to detect malicious activities
- Detect threats within physical infrastructure, apps, networks, data, users and workloads
- Investigate and identify phases of attack and bad actors within the environment
- Ensure immutability of containers at runtime
- Use Kubernetes audit logs to monitor access
Objetivos de aprendizaje
- Perform behavioral analytics to detect malicious activities
- Detect threats within physical infrastructure, apps, networks, data, users and workloads
- Investigate and identify phases of attack and bad actors within the environment
- Ensure immutability of containers at runtime
- Use Kubernetes audit logs to monitor access
03Supply Chain Security
Temas
- Minimize base image footprint
- Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)
- Secure your supply chain (permitted registries, sign and validate artifacts, etc.)
- Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)
Objetivos de aprendizaje
- Minimize base image footprint
- Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)
- Secure your supply chain (permitted registries, sign and validate artifacts, etc.)
- Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)
04Cluster Hardening
Temas
- Use Role Based Access Controls to minimize exposure
- Exercise caution in using service accounts e.g. disable defaults, minimize permissions on newly created ones
- Restrict access to Kubernetes API
- Upgrade Kubernetes to avoid vulnerabilities
Objetivos de aprendizaje
- Use Role Based Access Controls to minimize exposure
- Exercise caution in using service accounts e.g. disable defaults, minimize permissions on newly created ones
- Restrict access to Kubernetes API
- Upgrade Kubernetes to avoid vulnerabilities
05Cluster Setup
Temas
- Use Network security policies to restrict cluster level access
- Use CIS benchmark to review the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi)
- Properly set up Ingress with TLS
- Protect node metadata and endpoints
- Verify platform binaries before deploying
Objetivos de aprendizaje
- Use Network security policies to restrict cluster level access
- Use CIS benchmark to review the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi)
- Properly set up Ingress with TLS
- Protect node metadata and endpoints
- Verify platform binaries before deploying
06System Hardening
Temas
- Minimize host OS footprint (reduce attack surface)
- Using least-privilege identity and access management
- Minimize external access to the network
- Appropriately use kernel hardening tools such as AppArmor, seccomp
Objetivos de aprendizaje
- Minimize host OS footprint (reduce attack surface)
- Using least-privilege identity and access management
- Minimize external access to the network
- Appropriately use kernel hardening tools such as AppArmor, seccomp