My feedback about Kubernetes Security Specialist exam (CKS)

CKS: Certified Kubernetes Security Specialist was issued by The Linux Foundation to Jihad BENABRA.

I recently acquired my Certified Kubernetes Security Specialist (CKS) certification. As a result, several people have reached out to me for insights and feedback on the significant topics of the exam.

It’s essential to recognize that the exam format varies among candidates. However, in my experience, the challenge involved addressing 19 questions related to the following topics:

ImagePolicyWebhook

The objective is to activate this plugin and connect it with a webhook server.

Using Admission Controllers

Audit Policy

Activate the plugin and configure logs for specific resources (such as namespaces and secrets) at various levels (like Metadata, Request, etc.)…

Auditing

Anomaly fix with Falco or Sysdig

Utilize scanners such as Falco or Sysdig to investigate anomalies in containers and pods, and then format the output in a specified manner.

What is Falco, and how it work with Kubernetes

Sandbox containers, RuntimeClass and gVisor

Deploy a RuntimeClass and initiate a deployment using this class on the appropriate worker node.