Certified Kubernetes Security Specialist (CKS)

The Certified Kubernetes Security Specialist (CKS) program was created by the Cloud Native Computing Foundation (CNCF), in collaboration with The Linux Foundation, to help develop the Kubernetes ecosystem.

As one of the highest velocity projects in the history of open source, Kubernetes use is exploding. The Cloud Native Computing Foundation is committed to growing the community of Kubernetes-knowledgeable security specialists, thereby enabling continued growth across the broad set of organizations using the technology.

Certification is a key step in that process, allowing certified security specialists to quickly establish their credibility and value in the job market, and also allowing companies to more quickly hire high-quality teams to support their growth.

Cost $300 | Online Exam

考试费 ¥2088 (含税) | 中文监考官

About the program

The Certified Kubernetes Security Specialist (CKS) program provides assurance that a CKS has the skills, knowledge, and competence on a broad range of best practices for securing container-based applications and Kubernetes platforms during build, deployment and runtime. CKA certification is required to sit for this exam.

CKS is a performance-based certification exam that tests candidates’ knowledge of Kubernetes and cloud security in a simulated, real world environment. 

CNCF has open sourced the curriculum around which the CKS exam has been created to guide candidates’ exam preparation and for the benefit of companies offering training.

CNCF offers wholesale pricing on our exams to training companies purchasing in bulk. For more information, please contact trainingpartners@cncf.io.

Exam details

This exam is an online, proctored, performance-based test that requires solving multiple tasks from a command line running Kubernetes. Candidates have two (2) hours to complete the tasks.

The exam is taken remotely with a live proctor monitoring via webcam and screen sharing. Candidates for CKS must hold a current Certified Kubernetes Administrator (CKA) certification to demonstrate they possess sufficient Kubernetes expertise before sitting for the CKS. CKS may be purchased but not scheduled until CKA certification has been achieved. CKA Certification must be active (non-expired) on the date the CKS exam (including Retakes) is scheduled.

The certification remains valid for two years from the date it is awarded.

The certification exam tests specific domains and competencies including:

DomainWeight
Cluster Setup10%
Cluster Hardening15%
System Hardening15%
Minimize Microservice Vulnerabilities20%
Supply Chain Security20%
Monitoring, Logging, and Runtime Security20%

The cost is $300 and includes one free retake. For questions on the exam, please reach out.

Quarterly exam updates are planned to match Kubernetes releases.

Exam resources