Expected CKS Exam Topics, as suggested by Linux Foundation :

• Module 1: Cluster Setup: This topic assesses skills of Kubernetes practitioners in configuring secure Kubernetes clusters. It covers network security policies, CIS benchmarks, ingress security, node metadata protection, minimizing GUI access, and verifying platform binaries. Proficiency in these areas ensures a secure foundation for Kubernetes deployments.
• Module 2: Cluster Hardening: Cluster hardening focuses on securing Kubernetes API access, utilizing Role-Based Access Controls, managing service accounts, and keeping Kubernetes updated. This topic of the CKS exam measures the ability of Kubernetes practitioner to enhance cluster security by reducing exposure and managing permissions effectively.
• Module 3: System Hardening: It involves minimizing the host OS footprint, managing IAM roles, limiting network access, and using kernel hardening tools like AppArmor and seccomp. The topic tests the skills of Kubernetes practitioners that are required to secure the underlying OS and its interactions with Kubernetes.
• Module 4: Minimize Microservice Vulnerabilities: This topic of the Linux Foundation Kubernetes Security Specialist exam evaluates techniques to secure microservices, including OS-level security domains, managing Kubernetes secrets, using container runtime sandboxes, and implementing pod-to-pod encryption. It measures the ability to safeguard against vulnerabilities within a multi-tenant environment.
• Module 5: Supply Chain Security: Supply chain security addresses securing base images, whitelisting registries, signing images, performing static analysis, and scanning for vulnerabilities. The CKA exam assesses skills of Kubernetes practitioners in protecting the entire supply chain of containerized applications from creation to deployment.
• Module 6: Monitoring, Logging, and Runtime Security: This area of the Certified Kubernetes Security Specialist exam focuses on behavioral analytics, threat detection across infrastructure, and ensuring container immutability. Proficiency of the Kubernetes practitioner here demonstrates the ability to maintain security and investigate incidents effectively.

• Module 1: Storage: It explains storage classes, persistent volumes, volume mode, access modes, persistent volume claims primitive, and reclaim policies for volumes. Furthermore, this topic deals with configuring applications with persistent storage.
• Module 2: Troubleshooting: This topic discusses cluster and node logging, monitoring applications, managing container stdout, and stderr logs. It also deals with troubleshooting application failure, cluster component failure, and networking.
• Module 3: Workloads & Scheduling: Its sub-topics are manifest management and common templating tools, primitives, scaling apps, ConfigMaps, and performing rolling update and rollbacks.
• Module 4: Cluster Architecture, Installation & Configuration: In this questions about role based access control (RBAC), highly-available Kubernetes cluster, deployment of a Kubernetes cluster, etcd backup, and restore are included.
• Module 5: Services & Networking: This topic tests you understandings of host networking configuration, connectivity between Pods, ClusterIP, NodePort, LoadBalancer service types and endpoints. It also explains how to use Ingress controllers and Ingress resources, configure and use CoreDNS. Lastly, it discusses choosing a suitable container network interface plugin.