CKS exam facts, domains and practice

The CKS tests securing Kubernetes at every layer: cluster setup and hardening, minimizing microservice vulnerabilities, supply chain security, and runtime detection with tools like Falco, AppArmor, and Cilium. You must hold a valid CKA to sit it.

Who this exam is for

Security-focused engineers already holding an active CKA. The hardest of the Kubernetes trio: hands-on hardening, runtime security, and supply chain.

Exam facts

BodyCNCF / The Linux Foundation
FormatPerformance-based · 15-20 live tasks
Duration2 hours
Passing score67%
Exam cost$445 · 1 free retake
Validity2 years
PrerequisitesActive CKA required
Allowed resourcesk8s + tool docs (Falco, AppArmor...)
DeliveryOnline · PSI proctored
Extras2 killer.sh simulator sessions included

Curriculum domains

Minimize Microservice Vulnerabilities20%
Supply Chain Security20%
Monitoring, Logging & Runtime Security20%
Cluster Hardening15%
System Hardening15%
Cluster Setup10%

Practice coverage

environmentlive cluster
tasks per attempt16
fixed exam mocks3
alternate scenarios32
clocksame 2-hour clock
scoring barofficial 67%
access30 days · 5 full-sim attempts

CKS access, clearly explained

$39 USD · 30 days · one payment. 16 graded tasks, 5 attempts at the full exam simulation and unlimited single-task practice during the access window. The clock starts when you activate.

Public task descriptions; the selected weekly lab is free with an account. 2 free weekly starts per certification. Read this week's free task →

List price before any applicable checkout taxes or discounts. Create an account →

Official exam facts last reviewed Aug 19, 2026. Product access reviewed 2026-09-10. Check the exam source. Prepium is an independent practice platform.