← CKS overviewCertified Kubernetes Security Specialist / STUDY TOOLS
Exam coverage map
Prior CKA pass required. Scope: CNCF v1.34 curriculum; Linux Foundation's candidate FAQ lists Kubernetes v1.35 on 10 October 2026. Verify the booked environment. This is one of the five Kubestronaut certifications. CNCF curriculum attribution: CC BY 4.0.
Published objectives
| Objective |
Revision topic |
| 1 · Network boundaries, benchmarks, TLS, metadata and binaries |
01 Services, DNS and Network Policy, 03 Cluster Exposure, Benchmarks and Trust |
| 2 · RBAC, identities, API exposure and upgrades |
02 Cluster Lifecycle, RBAC and Extensions, 03 Cluster Exposure, Benchmarks and Trust |
| 3 · Host and kernel hardening |
04 Host, Kernel and Container Hardening |
| 4 · Pod security, secrets, isolation and encryption |
04 Host, Kernel and Container Hardening, 05 Pod Security, Secrets and Workload Encryption |
| 5 · Images and software supply chains |
06 Images, SBOMs and Admission Evidence |
| 6 · Behavior, audit and runtime investigation |
07 Audit Logs, Runtime Signals and Response |