Skip to main content
TT
Lab
Learn
Sandbox
Community
Language Learning (in Korean)
Get started
Learn
Learning paths
Courses
CKS — Kubernetes Security Specialist
Build the hands that actually lock a cluster down.
고급 · Lessons 31 · Lab 12
Start the lab
Curriculum
Cluster Setup
Why Auditing Starts With the Config File and Policy With Default Deny
reading
Cluster Setup Starting From Default Deny
lab
Quiz: Cluster Setup
quiz
Cluster Hardening
Why Permissions Quietly Grow
reading
Narrowing RBAC and Blocking Tokens
lab
Quiz: Cluster Hardening
quiz
System Hardening
A Container Is a Restriction, Not an Isolation
reading
Tightening With seccomp, AppArmor and Capabilities
lab
Quiz: System Hardening
quiz
Supply Chain Security
Knowing What Comes In Comes First
reading
Pinning Images and Controlling Provenance
lab
Admission Policy Written in CEL
lab
Quiz: Supply Chain Security
quiz
Minimising Microservice Vulnerabilities
Why Three Lines of Labels Replaced PSP
reading
Pod Security Admission and securityContext
lab
Handling Secrets and Encryption at Rest
lab
Quiz: Minimising Microservice Vulnerabilities
quiz
Runtime Security and Auditing
A Log You Did Not Keep Becomes an Event That Never Happened
reading
Designing an Audit Policy
lab
Quiz: Runtime Security and Auditing
quiz
Confirming It on a Real Cluster
Different Blocking Points Mean Different Places to Fix
reading
Watch What the Security Settings Actually Block
lab
Real Runtime Check
quiz
Encryption in Transit, Upgrades, Host OS Minimization
Encryption on the Wire, Vulnerabilities over Time, Surface on the Node
reading
Quiz: Encryption in Transit, Upgrades, Host OS
quiz
Open terminals and incident response
Revoking permission is not the same as closing a connection
reading
Permission revoked, terminal still alive
lab
Quiz: blocking, preserving, and recovering execution channels
quiz
Mock Exam
This Is What the CKS Exam Looks Like
reading
CKS Mock Exam A
lab
CKS Mock Exam B
lab
Reference docs
쿠버네티스 — 보안 강화 가이드
쿠버네티스 — RBAC
CKS 시험 안내