FirstTry
CKSCertified Kubernetes Security Specialist

Practice Exam 2

5 of this form’s 15 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    Kubelet configuration hardeningCluster Setup

    You are hardening a fleet of kubelets and want to confirm that an untouched node already refuses unauthenticated callers on its API. Which authentication defaults apply?

  2. Question 2 of 5

    API server authorization chainCluster Hardening

    A Role grants only the list verb on secrets in a namespace, and a teammate argues that withholding get keeps the values hidden. What does a list call return?

  3. Question 3 of 5

    Projected volumes and service account tokensMinimize Microservice Vulnerabilities

    A team runs a sidecar that presents its projected token to an in-cluster service never named in the projection audience. How should that service treat the token?

  4. Question 4 of 5

    Container image build hygieneSupply Chain Security

    You have a repository holding credentials and local notes that keep landing in the build context, and restructuring the tree is not an option. What keeps them out?

  5. Question 5 of 5

    Audit policy rules and levelsMonitoring, Logging and Runtime Security

    A team needs the submitted object body captured in the audit trail for every write to ConfigMaps. Which level must the matching rule name, at minimum?

0 of 15 completed

0%

The other 10 questions are the rest of this form: same 120 minute clock, same 67 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 2 of 2 on CKS.

What this exam covers

  • Cluster Setup2 questions / 15% of the exam
  • Cluster Hardening2 questions / 15% of the exam
  • System Hardening2 questions / 10% of the exam
  • Minimize Microservice Vulnerabilities3 questions / 20% of the exam
  • Supply Chain Security3 questions / 20% of the exam
  • Monitoring, Logging and Runtime Security3 questions / 20% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.