Certified Kubernetes Security Specialist (CKS)

• Certified Kubernetes Security Specialist (CKS)
• $7 Million Cybersecurity Scholarship by EC-Council

• Create Kubernetes Cluster and Look at Some ERRORS !!
• Chapter 2 Quiz

• Introduction NetworkPolicy
• Create Default Deny NetworkPolicy
• Create Egress and Ingress Rules
• Create Another NetworkPolicy for Different Name Space
• Chapter 3 Quiz

• Install Kubernetes Dashboard
• Insecure Access from Outside
• RBAC for Kubernetes Dashboard
• Chapter 4 Quiz

• Create an Ingress
• Secure an Ingress
• Chapter 5 Quiz

• Accessing Node Metadata
• Protect Node Metadata via NetworkPolicy
• Chapter 6 Quiz

• kube-bench
• Chapter 7 Quiz

• Download and Verify Kubernetes Release
• Verify apiserver Binary Running in Our Cluster
• Chapter 8 Quiz

• RBAC - Role and Rolebinding
• Role and Rolebinding for a User
• ClusterRole and ClusterRoleBinding
• Accounts and Users
• Certificate Signing Requests
• Chapter 9 Quiz

• Introduction
• Pod Uses Custom ServiceAccount
• Disable ServiceAccount Mounting
• Limit ServiceAccounts Permissions Using RBAC to Edit Resources
• Chapter 10 Quiz

• Enable/Disable Anonymous Access
• Let's Perform a Manual API Request
• External Apiserver Access
• NodeRestriction AdmissionController
• Chapter 11 Quiz

• Verify NodeRestriction
• Introduction
• Create a Cluster with Old Version
• Upgrade Master and Worker Node
• Chapter 12 Quiz

• Create Secret
• Hack Secrets in Docker
• Hack Secrets in ETCD
• ETCD Encryption
• ETCD Encryption - 2
• Chapter 13 Quiz

• Calling Linux Kernel from Inside Container
• Open Container Initiative OCI
• Crictl
• Create and Use RuntimeClasses
• Chapter 14 Quiz

• Set Container User and Group (Security Context)
• Force Container Non-Root
• Privileged Containers
• PrivilegeEscalation
• Chapter 15 Quiz

• Introduction
• Create Sidecar Proxy
• Chapter 16 Quiz

• Introduction OPA
• Install OPA Gatekeeper
• Deny All Policy
• Enforce Namespace Labels
• Chapter 17 Quiz

• Reduce Image Footprint with Multi-Stage
• Secure and Harden Images
• Chapter 18 Quiz

• Kubesec
• Use kubesec to Perform Static Analysis by Using Docker Image
• OPA Conftest
• OPA Conftest for Dockerfile
• Chapter 19 Quiz

• Use Trivy to Scan Images
• Chapter 20 Quiz

• Image Digest
• Whitelist Registries with OPA
• Chapter 21 Quiz

• Strace
• Strace and /proc on ETCD
• Access /proc and env Variables from Inside Pod
• FALCO
• Use Falco to Find Malicious Processes
• Investigate Falco Rules
• Change Falco Rule
• Chapter 22 Quiz

• Introduction
• StartupProbe
• SecurityContext Renders Container Immutable
• Chapter 23 Quiz

• Introduction
• Audit Policy
• Enable Audit Logging in Apiserver
• Create Secret and Check Audit Logs
• Chapter 24 Quiz

• AppArmor
• AppArmor for curl
• AppArmor for Docker Nginx
• Seccomp
• Seccomp for Docker Nginx
• Seccomp for Kubernetes Nginx
• Chapter 25 Quiz

Congratulations for Mastering Certified Kubernetes Security Specialist (CKS)