CKS Mock Exam — Core
A timed, weighted security mock: six questions spanning least-privilege RBAC, workload hardening, default-deny networking, Pod Security enforcement, TLS material, and hardened secret handling — scored as one, calibrated a notch above the real CKS.
Your mission
A timed security mock, scored like the real CKS: six weighted questions, one cluster, one score. 60 minutes; when it runs out your work is graded as it stands. Hints and solutions are locked while the clock runs. Pass is 66% — aim higher; this is calibrated above the exam.
Most questions live in the apps namespace; question 4 uses locked. Both already
exist. Bank the ones you know first.
Work fast
alias k=kubectl
kubectl config set-context --current --namespace=appsGenerate manifests with --dry-run=client -o yaml and edit; the security fields
(securityContext, policy selectors, RBAC verbs) are yours to add by hand.