Back to Courses
ContainerizationAdvanced🇬🇧 English

CKS Exam Preparation

Certified Kubernetes Security Specialist. Cluster hardening, runtime security with Falco, and supply chain security.

35 hours 412 students enrolled 5 modules

What You'll Learn

The most advanced Kubernetes certification. This course covers every CKS domain: cluster hardening against CIS benchmarks, microservice vulnerability mitigation, supply chain security with Falco and OPA Gatekeeper, and system call filtering with Seccomp and AppArmor. Includes three full timed practice exams in an environment mirroring the real CKS exam.

Taught entirely in English
Hands-on labs with real infrastructure
Lifetime access to recordings and materials
Private community for doubt clearing
Certificate of completion

Hands-On Projects Included (3)

CIS-Hardened Kubernetes Cluster

Run kube-bench against a cluster, identify failing controls, and remediate them by configuring API server flags, etcd encryption, and audit logging.

Runtime Security with Falco

Write custom Falco rules to detect suspicious container behaviour, exfiltration attempts, and privilege escalation — with alerts sent to Slack.

Supply Chain Security Pipeline

Build a secure image pipeline using Trivy scanning, Cosign image signing, and OPA Gatekeeper admission policies that reject unsigned or vulnerable images.

Course Curriculum

  1. 01Cluster Hardening
    • CIS Benchmark for Kubernetes
    • kube-bench Analysis
    • API Server Hardening Flags
  2. 02Workload Security
    • Pod Security Standards & Admission
    • OPA Gatekeeper Policies
    • Image Signing with Cosign
  3. 03Runtime Security
    • Falco Rules & Custom Alerts
    • Seccomp Profiles
    • AppArmor Integration
  4. 04Supply Chain Security
    • Trivy & Grype Scanning
    • SBOM Generation
    • Admission Controllers Deep Dive
  5. 05Exam Simulation
    • 3 Full Practice Exams
    • Time-Boxed Scenarios
    • kubectl Speed Drills

Tags

CKSKubernetesSecurityCNCFCertification