Official blueprint
The CKS exam covers 2 domains. Each domain has a defined weight — the percentage of exam questions it contributes. Courseiva has 784 practice questions mapped across these objectives.
Click any objective to see practice questions for that domain.
Cluster Setup is 15% of the CKS exam and covers hardening the Kubernetes control plane and worker nodes. You will perform live tasks in a terminal: applying NetworkPolicies, configuring API server admission controls, securing Ingress, and running kube-bench or CIS benchmark checks. Expect hands-on editing of manifests and verifying behaviour with kubectl rather than multiple-choice recall.
15 practice questions available
Cluster Hardening covers the controls that keep a Kubernetes cluster's own components and API surface resistant to compromise. For the CKS exam you work hands-on inside a live cluster: restricting API access, tightening RBAC, protecting kubelet endpoints, and upgrading components safely. Tasks are performance-based, so you must know the exact kubectl, kubeadm and systemd commands and apply them under time pressure.
21 practice questions available
Start with the highest-weight domain — that's where most of your exam questions will come from. Work through each objective's practice questions until you can answer at least 85% correctly. Return to lower-weight domains last, and use the full practice test to test cross-domain recall.