No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every Kubernetes CKS flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the Kubernetes CKS Practice Test purchase options.
Section 1
Use Network security policies to restrict cluster level access
Preview
Preview: Cluster Setup (15%)
Preview includes- 4 of 6 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Isolation model
- Pod and namespace selectors
- Ingress and egress
- ipBlock and except
Overview
NetworkPolicy is a Kubernetes API policy object that describes allowed Layer 3/4 traffic for selected Pods; actual enforcement depends on a compatible network plugin.
Core Concepts
- Ingress isolation and egress isolation are independent. A Pod can be isolated for one direction but not the other.
- Multiple NetworkPolicies are additive. Policy order and resource names do not create priority; allowed traffic is the union of matching allow rules.
- For Pod-to-Pod traffic, the source Pod egress rules and destination Pod ingress rules must both allow the connection when both sides are isolated.
Exam Tips
- Start by asking: which Pods are selected, for which direction, and is the peer expressed correctly?
- When traffic fails after default deny, verify DNS first, then peer selectors, ports, and both ends of Pod-to-Pod traffic.
Section 1 continues in Pro.Unlock Pro to read the full Use Network security policies to restrict cluster level access lesson plus every remaining Kubernetes CKS Study Guide section.
Unlock with Pro
Section 2
Use CIS benchmark to review security configuration of Kubernetes components
Pro
Use CIS benchmark to review security configuration of Kubernetes components unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Properly set up Ingress with TLS
Pro
Properly set up Ingress with TLS unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Protect node metadata and endpoints
Pro
Protect node metadata and endpoints unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Verify platform binaries before deploying
Pro
Verify platform binaries before deploying unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Use Role Based Access Controls to minimize exposure
Pro
Use Role Based Access Controls to minimize exposure unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Exercise caution in using service accounts
Pro
Exercise caution in using service accounts unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Restrict access to Kubernetes API
Pro
Restrict access to Kubernetes API unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Upgrade Kubernetes to avoid vulnerabilities
Pro
Upgrade Kubernetes to avoid vulnerabilities unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Using least-privilege identity and access management
Pro
Using least-privilege identity and access management unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Minimize external access to the network
Pro
Minimize external access to the network unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 13
Appropriately use kernel hardening tools such as AppArmor, seccomp
Pro
Appropriately use kernel hardening tools such as AppArmor, seccomp unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 14
Use appropriate pod security standards
Pro
Use appropriate pod security standards unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 15
Manage Kubernetes secrets
Pro
Manage Kubernetes secrets unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 16
Understand and implement isolation techniques
Pro
Understand and implement isolation techniques unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 17
Implement Pod-to-Pod encryption
Pro
Implement Pod-to-Pod encryption unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 19
Understand your supply chain
Pro
Understand your supply chain unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 20
Secure your supply chain
Pro
Secure your supply chain unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 21
Perform static analysis of user workloads and container images
Pro
Perform static analysis of user workloads and container images unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 22
Perform behavioral analytics to detect malicious activities
Pro
Perform behavioral analytics to detect malicious activities unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 23
Detect threats within physical infrastructure, apps, networks, data, users and workloads
Pro
Detect threats within physical infrastructure, apps, networks, data, users and workloads unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 24
Investigate and identify phases of attack and bad actors within the environment
Pro
Investigate and identify phases of attack and bad actors within the environment unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 25
Ensure immutability of containers at runtime
Pro
Ensure immutability of containers at runtime unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 26
Use Kubernetes audit logs to monitor access
Pro
Use Kubernetes audit logs to monitor access unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro