Certified Kubernetes Security Specialist 2026
Master Course to prepare for CKS certification.
Lo que serás capaz de hacer
This course is specifically designed for the aspirants who intend to give the " Certified Kubernetes Security Specialist " certification as well as for individuals who intend to gain a strong foundation in Kubernetes Security. One of the pre-requisites for the course is the candidate's prior understanding on the topics discussed in the CKA certification. We begin the journey with setting up a Hardened Kubernetes cluster from absolute scratch and then the deep dive journey into various K8s + Security begins. This course also has an exam preparation section with a series of practice tests to verify the candidate's understanding of the topics discussed and verify if the candidate is ready to give the official certification exams. Keeping the standards high similar to other best-seller courses of Zeal, this course has a perfect balance, and every topic is explained in a simplified way with practical scenarios. With tons of practicals, easy-to-understand videos, and a dedicated exam preparation section, this course is all you need to gain a deeper understanding of Kubernetes and ace the official Certified Kubernetes Security Specialist" certification. With this exciting set of learnings and practicals, I look forward to seeing you in this course and be part of your journey into Kubernetes and getting CKS certified.
- PASS the Certified Kubernetes Security Specialist (CKS) exam.
- Gain REAL-WORLD insights in practical security specific implementation for Kubernetes.
- ALL 500+ PPT SLIDES available to download.
- Little Theory. ALL Practicals.
Temario
UNIDAD 1 - Introduction · 4 leccionesUNIDAD 1 - Introduction
UNIDAD 1 - Introduction
- Introduction to the Course
- About the Course and Important Resources
- Document - Course Resources
- PPT For Entire Course
UNIDAD 2 - Domain 1 - Cluster Setup · 40 leccionesUNIDAD 2 - Domain 1 - Cluster Setup
UNIDAD 2 - Domain 1 - Cluster Setup
- Overview of CIS Benchmarks
- CIS Benchmark for Kubernetes
- Lab Setup for Course - New
- Document Lecture - Digital Ocean
- Creating Infrastructure for Labs - New
- Revising Kubernetes Architecture
- Etcd Security Guidelines - New
- Configure Etcd Binaries - New
- Overview of Certificate Authority - New
- Configure Certificate Authority
- Workflow - Issuance of Signed Certificates
- etcd - Transport Security with HTTPS
- Overview of Mutual TLS Authentication
- Practical - Mutual TLS Authentication
- Integrating Systemd with etcd
- API Server Security Guidelines
- Configure API Server
- Transport Security for API Server
- Access Control
- Static Token File Authentication
- Downsides of Static Token File Authentication
- Implementing X509 Client Authentication
- Downsides of X509 Client Authentication
- Authorization
- Encryption Provider
- Implementing Auditing
- Setting up kubeadm cluster - New
- Revising Taints and Tolerations - New
- Kubelet Security - New
- Verify Platform Binaries
- Revising Basics of Ingress
- Overview of Ingress with TLS
- Practical - Ingress with TLS
- Ingress Annotation - SSL Redirect
- Revising Basics of Network Policies
- Structure of Network Policy
- Practical - Network Policies
- Network Policies - Except, Port and Protocol
- Kubeadm Structure
- Kubeadm Troubleshooting
UNIDAD 3 - Domain 2 - Cluster Hardening · 17 leccionesUNIDAD 3 - Domain 2 - Cluster Hardening
UNIDAD 3 - Domain 2 - Cluster Hardening
- Revision - Authentication
- Revision - Authorization
- Revision - RBAC
- Creating Token for RBAC Practicals
- Practical - Role and RoleBinding
- Practical - ClusterRole and ClusterRoleBinding
- ClusterRole and ClusterRoleBinding
- Overview of Service Accounts
- Service Accounts - Points to Note
- Service Account Security - New
- Version Skew Policy
- Overview - Upgrading kubeadm Clusters
- Setup Environment for Upgrading Clusters
- Practical - Upgrade Control Plane Node
- Practical - Upgrade Worker Node
- Overview of Projected Volumes
- Mounting Service Accounts using Projected Volumes
UNIDAD 4 - Domain 3 - Minimize Microservice Vulnerabilities · 36 leccionesUNIDAD 4 - Domain 3 - Minimize Microservice Vulnerabilities
UNIDAD 4 - Domain 3 - Minimize Microservice Vulnerabilities
- Linux Capabilities
- Practical - Linux Capabilities
- Security Context - New
- Privileged Pods
- Set Capabilities for Containers
- Overview of Admission Controllers
- ImagePullPolicy
- Admission Controller - AlwaysPullImages
- Overview of Pod Security Standards
- Practical - Pod Security Standards
- Modes - Pod Security Admission
- Points to Note - PSA and PSS - New
- Admission Controller - ImagePolicyWebHook
- Practical - ImageWebHook
- Revising Kubernetes Secrets
- Practical - Kubernetes Secrets
- Overview of Cilium
- Practical - Configuring Cilium for Kubernetes
- Structure of Cilium Network Policies
- Cilium Network Policies - Layer 3 Rules
- Cilium Network Policies - Entities Based
- Cilium Network Policies - Layer 4 Rules
- Cilium Network Policies - DNS Rules
- Cilium - Deny Policies
- Overview of Cilium Transparent Encryption
- Cilium Transparent Encryption - IPSec
- Cilium Transparent Encryption - WireGuard
- Security Context - readOnlyRootFilesystem
- Monolithic vs Microservices
- Challenges with Microservices Architecture
- Introduction to Service Mesh
- Introduction to Istio
- Practical - Installing Istio
- Istio - Automatic Sidecar Proxy Injection
- Overview of Mutual TLS with Istio
- Practical - Mutual TLS with Istio
UNIDAD 5 - Domain 4 - System Hardening · 9 leccionesUNIDAD 5 - Domain 4 - System Hardening
UNIDAD 5 - Domain 4 - System Hardening
- Overview of AppArmor
- Practical - AppArmor
- AppArmor and Kubernetes
- OCI and Container Runtimes
- Configuring containerd and runc
- Container Runtime Interface
- Overview of Container Sandboxes
- Overview - gVisor and RuntTimeClass
- Practical - gVisor
UNIDAD 6 - Domain 5 - Supply Chain Security · 12 leccionesUNIDAD 6 - Domain 5 - Supply Chain Security
UNIDAD 6 - Domain 5 - Supply Chain Security
- Vulnerability, Exploit and Payload - New
- Container Security Scanning
- Scan images for known vulnerabilities
- Scanning K8s Clusters for Security Best Practices
- Overview of Static Analysis
- Securing the Docker Daemon
- DockerFile - Security Best Practices
- Docker Daemon Configuration File
- Protecting Docker Daemon Socket
- Practical - Docker Daemon Socket on TLS
- BOM and SBOM
- Practical - Generating SBOM
UNIDAD 7 - Domain 6 - Monitoring, Logging and Runtime Security · 8 leccionesUNIDAD 7 - Domain 6 - Monitoring, Logging and Runtime Security
UNIDAD 7 - Domain 6 - Monitoring, Logging and Runtime Security
- Overview of Falco
- Installing Falco
- Falco - Practical
- Writing Custom Falco Rules and Macros
- Falco Rule for /dev/mem Access
- Falco Configuration File
- Introduction to Sysdig
- Audit Logging In-Detail
UNIDAD 8 - Exam Preparation Section · 3 leccionesUNIDAD 8 - Exam Preparation Section
UNIDAD 8 - Exam Preparation Section
- Our Community
- Important Pointers for Exams
- Alert - New Topic in Exam
Tu certificado lo emite la SEP, no solo una plataforma
Al demostrar la competencia recibes un certificado emitido por la Secretaría de Educación Pública a través del Gobierno del Estado de México: un documento oficial que puedes presentar con confianza ante cualquier empleador o institución.
Tu certificado con INEC
- Lo emite la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México
- Documento oficial con folio verificable en línea
- Lo otorga la Universidad Tecnológica Fidel Velázquez
Otras plataformas en línea
- Constancia privada emitida por la misma plataforma
- Solo acredita horas cursadas o asistencia
- Sin respaldo de una autoridad educativa
Tu itinerario, de la inscripción al certificado
- 1
Inscripción con pago único
Pagas $2,800 MXN una sola vez y entras de inmediato al curso.
- 2
Estudias a tu ritmo
8 unidades con videos, lecturas y actividades, disponibles 24/7 durante 12 meses.
- 3
Cuestionarios por unidad
Cuestionarios para comprobar lo aprendido.
- 4
Certificado
Emitido por la SEP a través del Gobierno del Estado de México, con folio verificable.
Un certificado oficial de la SEP
Muestra · verificable por folio y QR
- Emitido por la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México. No es una constancia privada: es un documento oficial, y ese respaldo marca la diferencia frente a otras plataformas en línea.
- Contenido impartido por Zeal Vora.
- Folio y QR verificables para compartirlo con quien te contrate.
Empieza hoy, a tu ritmo
Un solo pago y acceso inmediato al curso completo durante 12 meses.
- 8 unidades · 129 lecciones · 40 h
- 12 meses de acceso
- Certificado emitido por la SEP (Gob. del Estado de México) con folio verificable
Sobre tu inscripción
¿Cómo es el pago?
Un solo pago de $2,800 MXN. No hay mensualidades ni cargos recurrentes.
¿Cuánto tiempo tengo acceso?
12 meses desde tu inscripción, 24/7, para avanzar a tu ritmo.
¿Quién imparte el contenido?
El curso es impartido por Zeal Vora; INEC gestiona tu inscripción, evaluación y certificado.
¿Qué pasa cuando vence mi acceso?
Puedes renovar tu cuenta tú mismo desde la plataforma, sin trámites ni esperas.
