Recommended Free Tools
The Certified Kubernetes Security Specialist (CKS) is a two-hour, remotely proctored, hands-on Kubernetes exam. You must have passed the Certified Kubernetes Administrator (CKA), but your CKA does not need to be active. To prepare, use CNCF’s published curriculum as a checklist and spend your study time practicing Kubernetes command-line work, with extra attention to the three domains that each carry 20% of the exam.
Do I need an active CKA to take CKS?
You must have passed the CKA before attempting CKS, but CNCF says the CKA need not be active. The CKS exam page identifies CKA as the prerequisite; it does not list KCNA as an additional requirement. Confirm eligibility and current registration terms on the CNCF CKS exam page before booking.
As an Amazon Associate I earn from qualifying purchases.
What is the CKS exam format?
CNCF describes CKS as an online, remotely proctored, performance-based exam in which candidates solve multiple tasks from a Kubernetes command line. You have two hours. This is a practical assessment, not simply a test of security terminology, so study materials alone are not a substitute for timed command-line practice.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →The exam page says quarterly updates are planned to keep the exam aligned with Kubernetes releases. That is a stated plan, not a guarantee of a particular change in every quarter. Check the current curriculum when you prepare so your study matches the published requirements.
#1 Best Overall
What topics are on the CKS exam?
CNCF lists six domains and assigns each a distinct weight. The three domains weighted at 20% account for 60% of the listed exam weight; the remaining domains still make up the other 40% and should not be ignored.
| Official domain | Weight |
|---|---|
| Cluster Setup | 10% |
| Cluster Hardening | 15% |
| System Hardening | 15% |
| Minimize Microservice Vulnerabilities | 20% |
| Supply Chain Security | 20% |
| Monitoring, Logging, and Runtime Security | 20% |
Use the official CKS page and curriculum to review the scope under each domain. The curriculum is open source and intended to guide preparation; domain weights indicate relative emphasis, not a promise about the exact tasks you will receive.
How should I study for CKS?
- Turn the official curriculum into a checklist. Work through its objectives and mark what you can perform, not just explain. Return to the curriculum shortly before your exam in case it has changed.
- Allocate practice time by the published weights. Give substantial time to Minimize Microservice Vulnerabilities, Supply Chain Security, and Monitoring, Logging, and Runtime Security, which are 20% each. Also cover Cluster Setup (10%), Cluster Hardening (15%), and System Hardening (15%).
- Practice at a Kubernetes command line. Rehearse the relevant work directly in a command-line environment and use timed sessions to build fluency under a two-hour limit. Timed practice is a preparation method, not evidence of the actual exam interface, task mix, or passing standard.
- Choose learning resources by fit, not rankings. CNCF describes its Kubernetes Security Essentials course as aligned with CKS requirements. In June 2026, CNCF announced CKS training and certification bundles through its Udemy partnership. Compare any course’s alignment with the current curriculum, the amount of hands-on Kubernetes practice, freshness, fit with your CKA background, and total cost; no course is inherently a substitute for practice.
- Check the version and date of books or other guides. If you use a physical Kubernetes security guide, compare its publication date and the Kubernetes version it covers with the current official curriculum. No particular book or edition is established here as current or recommended.
The CKA prerequisite makes prior Kubernetes administration experience relevant to planning your preparation, but passing CKA alone does not establish readiness for this security-focused practical exam. No pass rate, typical study duration, passing score, or verified employer preference is provided on the cited official pages, so avoid using unsupported figures to set expectations.
How much does CKS cost?
The CNCF exam page currently displays a price of $445, including one free retake. It also states that the certification is valid for two years from award. These are page details that can change; verify the price, retake terms, and validity information on the registration page before purchasing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Does passing CKS renew CKA?
Under CNCF’s CARE update, beginning June 18, 2026, passing CKS or recertifying CKS automatically reinstates or extends CKA to match the new CKS expiration date. Christophe Sauthier, CNCF’s Cloud Native Training and Certification Lead, stated this in the June 17, 2026 CARE announcement. This policy does not change the prerequisite: you still need to have passed CKA before attempting CKS.
Quick Recap
Best Value
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
