<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/ci-cd-supply-chain-security-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-localhost-profile-not-found-troubleshooting-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/external-secrets-operator-externalsecret-resource-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/check-anonymous-authentication-enabled-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-rbac-hardening-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restricted-pod-security-standard-capabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-constraint-readonlyrootfilesystem-rego-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-security-hardening-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sign-container-image-cosign-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/how-to-enforce-signed-images-kyverno-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-create-secret-from-file-arguments-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-protect-kernel-defaults-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-nodrestriction-admission-plugin-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-patch-deployment-mount-secret-volume-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detect-container-vulnerabilities-ci-cd-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-kubernetes-dashboard-access-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/hardening-kubernetes-dashboard-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-allowed-image-registry-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-annotation-container-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/immediate-pod-network-isolation-kubectl-networkpolicy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-container-image-cve-distroless-digest-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/valid-flags-for-enabling-admission-plugins-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/configure-apiserver-audit-logging-metadata-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-clusterrolebinding-read-only-user-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sbom-generation-with-syft-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-crash-runasnonroot-true-root-image-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-condition-field-syscall-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/read-only-root-filesystem-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-forensics-evidence-preservation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-policy-runasnonroot-enforce-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apply-restricted-pod-security-standard-namespace-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-node-hardening-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-pattern-sha256-image-digest-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/custom-seccomp-profile-localhost-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-etcd-cluster-kubernetes-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-best-practices-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/default-seccomp-profile-kubernetes-runtimedefault-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-flag-encrypted-communication-api-server-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-add-specific-yaml-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimum-etcd-members-high-availability-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-container-image-integrity-and-origin-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-immutability-digest-sha256-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-service-account-token-automount-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-audit-logging-kube-apiserver-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/runtime-security-tools-container-breakout-detection-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/isolate-compromised-pod-networkpolicy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/immutable-container-filesystem-with-temp-volume-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/mutating-admission-webhook-failurepolicy-ignore-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-nonroot-container-runasnonroot-admission-policy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforcing-read-only-root-filesystem-for-containers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-kubernetes-api-server-access-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/when-to-scan-container-images-in-ci-cd-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encryption-at-rest-etcd-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-privilege-escalation-setuid-syscall-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-control-opa-gatekeeper-for-security-policies-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-shell-as-pid-1-condition-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encrypt-etcd-data-at-rest-encryptionconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/runasnonroot-image-runs-as-root-error-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/incident-response-compromised-container-crictl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-priorities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-pod-spec-yaml-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/mutating-webhook-automatically-add-labels-pods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-stage-responsecomplete-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-daemonset-deployment-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validating-mutating-admission-webhook-controllers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-write-syscall-file-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-incident-response-container-compromise-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rbac-restrict-service-account-to-namespace-pod-creation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secrets-management-approaches-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/allowprivilegeescalation-false-pod-securitycontext-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/understanding-crictl-container-running-state-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-node-selection-restriction-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepullbackoff-missing-imagepullsecret-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-sign-environment-variable-key-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-privilege-escalation-pod-securitycontext-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-peerauthentication-strict-mode-mtls-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-auth-reconcile-permission-error-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-kubernetes-benchmark-recommendations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-readonly-root-filesystem-capabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-inspect-running-container-commands-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-pending-taint-toleration-solution-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonly-root-filesystem-kubernetes-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apply-encryption-config-kubernetes-without-restart-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/adding-linux-capability-via-capabilities-add-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-deployment-labels-kyverno-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-admission-enforce-restricted-policy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/hostpid-hostnetwork-container-breakout-risk-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-control-1-1-1-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-container-running-as-root-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-dashboard-security-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-security-context-settings-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-noderestriction-admission-plugin-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-protect-kernel-defaults-flag-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/hostpid-hostnetwork-pod-crash-podsecurity-enforce-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/preserving-evidence-during-container-security-incident-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-controller-order-mutating-validating-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-apparmor-profile-enforce-mode-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sbom-generation-tools-trivy-syft-container-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforcing-non-root-containers-with-runasnonroot-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/runtime-default-seccomp-profile-explained-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-image-digest-sha256-deployment-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/allow-privilege-escalation-pod-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-manifest-security-tools-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-constrainttemplate-for-pod-policies-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/authorization-mode-order-rbac-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-signing-tools-cosign-notary-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-api-server-manifest-file-permissions-cis-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-configuration-steps-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secret-environment-variables-risk-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/static-analysis-tools-kubernetes-manifests-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-controller-read-only-root-filesystem-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/best-action-after-trivy-reports-cves-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-enforce-nonroot-user-container-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-localhost-profile-storage-location-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-container-escape-capabilities-to-drop-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-priority-levels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-restrict-container-image-registry-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-complain-mode-not-enforcing-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-rbac-configuration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-fsgroup-file-ownership-new-files-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/invalid-method-enforce-pod-security-standards-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-audit-logging-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-no-cap-sys-admin-cluster-wide-webhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restricted-pod-security-standard-drop-all-capabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-logs-live-streaming-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-shell-execution-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-audit-log-path-remediation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-image-registry-validation-policy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/generate-sbom-container-image-syft-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-vulnerability-scanning-tool-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-critical-vulnerabilities-rebuild-image-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-load-custom-rules-file-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/tls-certificates-for-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-kubernetes-encryption-at-rest-secrets-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-profile-application-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/incident-response-steps-compromised-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/list-clusterrolebindings-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-networkpolicy-ingress-restrict-traffic-pod-labels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standards-admission-plugin-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-configuration-kubernetes-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gatekeeper-enforce-pod-resource-limits-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/deny-all-ingress-networkpolicy-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-read-etcshadow-file-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/using-crictl-list-container-processes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/capabilities-drop-all-kubernetes-field-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-non-root-shell-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubesec-static-analysis-kubernetes-manifests-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-deny-container-runasuser-root-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-kubelet-anonymous-auth-kube-bench-failure-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-cluster-upgrade-steps-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-encryption-at-rest-kubernetes-apiserver-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/vulnerability-remediation-ci-scanning-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/network-policy-isolate-compromised-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-protect-kernel-defaults-flag-2-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-pod-security-standards-methods-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/view-crashed-pod-logs-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-api-server-security-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-peerauthentication-mtls-namespace-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/custom-seccomp-profile-localhost-type-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-security-features-purposes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-tls-client-authentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rbac-clusterrole-clusterrolebinding-pods-all-namespaces-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-priority-levels-lowest-to-highest-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubesec-static-analysis-kubernetes-manifests-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/configuring-capabilities-for-tcp-dns-lookups-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-sbom-attestation-cosign-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reject-latest-tag-admission-controller-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-ps-list-running-containers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-immutable-root-filesystem-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/tools-for-generating-sbom-of-container-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-image-scan-critical-vulnerabilities-json-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/modify-kernel-parameters-pod-allowedunsafesysctls-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/node-level-vs-container-level-hardening-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-tls-client-authentication-configuration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/investigate-pod-network-traffic-tcpdump-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-encryption-at-rest-etcd-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-peerauthentication-mtls-modes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-constrainttemplate-violation-rule-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-deny-egress-empty-egress-section-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cilium-hubble-kubernetes-network-monitoring-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/re-encrypt-secrets-after-encryption-key-rotation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-automount-service-account-token-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/isolate-compromised-pod-with-networkpolicy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-bootstrap-client-certificate-error-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-macro-sensitive-file-names-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-stuck-control-plane-taint-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gvisor-runtimeclass-kubernetes-pod-spec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-docker-socket-mount-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/revoke-cluster-admin-service-account-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-kubelet-recommendations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/what-are-kubernetes-audit-policy-levels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-levels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/tools-to-generate-sbom-container-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/required-flags-audit-logging-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-authentication-token-webhook-namespace-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonly-root-filesystem-effect-on-container-logging-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubeadm-production-control-plane-requirements-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-shell-execution-execve-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-yaml-structure-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-crash-allowprivilegeescalation-false-setcap-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-mutate-action-sidecar-injection-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/creating-runtimeclass-for-gvisor-runsc-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-container-image-policy-enforcement-tools-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rbac-role-rolebinding-secrets-namespace-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/runtimeclass-gvisor-kata-containers-pod-spec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/host-namespace-settings-pod-spec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-logging-stages-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validatingwebhookconfiguration-namespace-mismatch-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-disable-anonymous-auth-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/scan-container-image-vulnerabilities-trivy-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detect-fork-bomb-attack-falco-rule-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-context-readonlyrootfilesystem-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apply-apparmor-profile-pod-annotation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-client-certificate-authentication-remediation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-encryption-at-rest-providers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-imagepolicywebhook-cosign-image-signing-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-container-image-integrity-digest-cosign-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-non-root-containers-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/clusterrole-rolebinding-namespace-label-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/avoid-hardcoded-secrets-dockerfile-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-network-security-concepts-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/examining-container-processes-with-kubectl-exec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-logs-command-container-logs-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubesec-scan-error-code-meaning-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-supply-chain-security-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sbom-benefits-software-bill-of-materials-supply-chain-security-cncf-ck-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-kubelet-anonymous-authentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-validating-admission-webhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-authentication-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kata-containers-cni-network-not-ready-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-security-context-drop-all-capabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/securing-kubernetes-secrets-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/read-only-root-filesystem-podsecurity-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/load-apparmor-profile-file-kernel-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-api-server-recommendations-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encrypt-secrets-at-rest-kubernetes-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/list-opa-gatekeeper-constrainttemplates-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-runtime-security-file-write-monitoring-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/harden-kubernetes-control-plane-containers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gvisor-runsc-privileged-access-limitations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-encryption-at-rest-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-container-images-registry-opa-gatekeeper-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-verify-image-signature-commands-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-webhook-rules-mismatch-pod-create-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detecting-etc-shadow-read-attempts-with-falco-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-levels-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detecting-container-shell-spawn-falco-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/harden-pods-against-root-compromise-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encryptionconfiguration-aescbc-yaml-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-logs-integrity-confidentiality-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-kubelet-anonymous-authentication-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/list-of-valid-falco-output-fields-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secret-volume-update-no-restart-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/image-pull-secrets-service-account-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/interacting-with-container-runtime-via-crictl-and-ctr-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-privilege-escalation-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-anonymous-auth-kubelet-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/runtimeclass-handlers-for-container-sandboxing-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/ci-cd-pipeline-security-best-practices-scanning-signing-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/setting-read-only-root-filesystem-in-pod-spec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-opa-gatekeeper-constraint-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gatekeeper-admission-controller-type-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-etcd-self-signed-certificate-fix-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-security-context-runasuser-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/baseline-pod-security-standard-restrictions-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-client-certificate-missing-impact-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-mtls-authorizationpolicy-microservice-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/syft-container-image-sbom-generator-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-containers-running-as-root-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-validate-deny-trusted-registry-policy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-admission-controller-image-scanning-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cluster-wide-permissions-clusterrolebinding-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-critical-vulnerabilities-image-deployment-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-etcd-security-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-constrainttemplate-constraint-resources-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apply-custom-seccomp-profile-pod-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/mutating-webhook-misconfiguration-crashloopbackoff-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-istio-mtls-peerauthentication-namespace-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-secret-from-file-kubectl-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-logging-configuration-steps-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-etcd-kubernetes-cluster-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-gvisor-container-sandbox-runtimeclass-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-not-available-node-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-kubernetes-pod-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-ingress-pod-selector-label-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/check-nodeport-service-endpoints-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimize-microservice-vulnerabilities-kubernetes-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-image-digest-pinning-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-stages-per-stage-levels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-networkpolicy-deny-ingress-namespace-pod-and-logic-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-mtls-enforcement-peerauthentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-pending-insufficient-cpu-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-pod-pending-control-plane-taint-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/troubleshoot-opa-gatekeeper-constraint-not-denying-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/aes-cbc-encryption-at-rest-encryptionconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-secret-injection-csi-driver-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-encryption-at-rest-kubernetes-encryptionconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/scan-kubernetes-pod-manifest-security-issues-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-namespace-filtering-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonlyrootfilesystem-pod-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/patch-vulnerability-signed-images-rolling-update-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rbac-hardening-best-practices-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-runasnonroot-runasuser-interaction-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/first-resource-opa-gatekeeper-constrainttemplate-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/podsecuritypolicy-not-enforced-admission-controller-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-stages-responsecomplete-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-security-best-practices-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-seccomp-profile-pod-security-admission-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gvisor-runtimeclass-configuration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-dashboard-purpose-web-ui-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-attest-command-for-ci-pipeline-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-anonymous-auth-kubectl-edit-static-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/register-admission-webhook-validatingwebhookconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-api-server-access-restriction-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-anonymous-authentication-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/delete-rolebinding-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-resourcequota-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/securing-kubernetes-dashboard-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-all-capabilities-vulnerability-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-open-syscall-file-access-detection-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-detect-outbound-connections-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gatekeeper-constraint-dryrun-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-logs-previous-flag-crash-loop-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonlyrootfilesystem-tmp-empty-directory-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-spawned-process-macro-inherited-shell-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-encryption-at-rest-existing-secrets-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-readonly-root-filesystem-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-outdated-vulnerability-database-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-api-server-recommendations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-kubernetes-audit-logging-apiserver-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/securing-etcd-datastore-tls-peer-authentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-kubernetes-benchmark-purpose-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/valid-admission-controllers-supply-chain-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/automount-service-account-token-security-concern-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-logs-specific-container-multi-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubeadm-static-pod-manifests-location-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-trusted-registry-constraint-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimal-base-image-for-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-controller-for-image-signature-verification-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-stages-complete-list-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/tls-encryption-nodes-control-plane-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reducing-falco-rule-noise-exceptions-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/api-server-hardening-node-restriction-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-unconfined-syscall-access-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-kubelet-anonymous-auth-configmap-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-monitoring-execve-events-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-images-to-specific-registry-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-kubelet-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-authorization-mode-node-rbac-fix-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-egress-external-ip-port-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/inspecting-network-connections-inside-container-crictl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-detect-shell-in-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-logs-view-container-logs-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-annotation-for-custom-profile-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-add-net-bind-service-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secrets-mount-as-volume-best-practice-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-hostpid-hostnetwork-hostipc-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-ps-no-output-runtime-endpoint-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-verify-no-signatures-troubleshooting-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-pod-security-standards-psa-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-supply-chain-security-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gradual-seccomp-rollout-cluster-wide-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standards-restricted-setuid-escalation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-verify-image-signature-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/check-apparmor-enabled-profiles-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gatekeeper-constraint-template-pod-label-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/configure-encryption-at-rest-secrets-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-namespace-labels-opa-gatekeeper-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-mtls-istio-peerauthentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-api-server-certificate-expired-recovery-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-etcd-kubernetes-tls-encryption-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-audit-steps-install-run-remediate-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-runtime-security-configuration-steps-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-rule-order-default-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-cap-setuid-container-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-podsecurity-admission-plugin-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-linux-capabilities-add-specific-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/check-apparmor-profiles-loaded-aa-status-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/harden-container-runtime-apparmor-seccomp-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/nodrestriction-admission-plugin-function-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-require-runasnonroot-true-pod-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/remove-cluster-admin-service-account-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-priority-field-reduce-false-positives-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimize-compromised-container-impact-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/image-digest-kubernetes-deployment-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-capability-escalation-allowprivilegeescalation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/dockerfile-non-root-user-best-practice-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reduce-container-attack-surface-kubernetes-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-signature-verification-failure-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-image-output-format-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standard-privileged-level-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-etcd-security-recommendations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-connect-syscall-outbound-network-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validating-webhook-failure-policy-fail-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/daemonset-pending-node-taints-tolerations-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standards-restricted-enforce-mode-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-podsecurity-admission-plugin-restrict-sa-tokens-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/list-valid-kubernetes-audit-stages-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detecting-unexpected-outbound-connections-falco-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-image-signatures-kubernetes-admission-control-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/run-kube-bench-as-kubernetes-job-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-configuration-file-flag-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepullbackoff-manifest-not-found-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-profile-types-runtimedefault-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-port-10250-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-mtls-istio-service-mesh-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-deny-all-egress-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enable-encryption-at-rest-kubernetes-secrets-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonlyrootfilesystem-container-securitycontext-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcdctl-health-check-tls-client-certificate-authentication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-signed-images-kyverno-verifyimages-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-insecure-port-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-secret-from-file-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validatingwebhook-service-unreachable-troubleshooting-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-read-only-root-filesystem-gatekeeper-exception-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-stages-responsecomplete-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/distroless-base-image-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-runasnonroot-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secret-volume-type-vs-configmap-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sidecar-container-log-file-stdout-kubectl-logs-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-image-scanning-ci-cd-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-signed-scanned-images-gitops-kyverno-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-crash-drop-all-capabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/service-account-token-expiration-projected-volume-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-level-request-response-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-validatingwebhookconfiguration-opa-gatekeeper-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-hardening-node-restriction-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-logging-levels-explained-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-run-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-filesystem-scan-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-container-image-signature-cosign-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-enforce-image-digest-reference-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-kernel-module-overlayfs-nodes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-kubernetes-dashboard-access-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-api-server-security-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/place-custom-seccomp-profile-kubernetes-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/dockerfile-security-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/run-kube-bench-control-plane-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-image-signature-validation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-authorization-mode-webhook-restrict-node-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reduce-container-attack-surface-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-exec-forensic-analysis-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/check-kubectl-exec-events-audit-logs-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-image-signing-admission-webhook-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-recommended-admission-plugins-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-detect-sensitive-file-access-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-rbac-resources-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/istio-service-mesh-mtls-purpose-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encrypt-secrets-at-rest-kubernetes-encryptionconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reduce-node-attack-surface-disable-services-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/integrate-hashicorp-vault-kubernetes-approaches-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/generate-sbom-attestation-cosign-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-net-raw-capability-baseline-podsecurity-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-role-kubectl-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/opa-gatekeeper-restrict-image-registry-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cluster-wide-capability-drop-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/podsecuritypolicy-removal-in-kubernetes-1-25-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/external-secret-managers-benefits-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-egress-specific-ip-port-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-container-image-scanning-command-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sbom-software-bill-of-materials-purpose-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-readonly-root-filesystem-security-context-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonly-root-filesystem-kubernetes-security-context-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-security-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-enforce-pod-security-policy-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/audit-policy-level-metadata-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-apiserver-disable-anonymous-auth-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-security-context-mitigate-container-breakout-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rego-reserved-keywords-opa-policies-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/networkpolicy-label-selector-pod-communication-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validating-vs-mutating-admission-webhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-container-escape-seccomp-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-seccomp-runtimedefault-container-gatekeeper-rego-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-localhost-profile-yaml-syntax-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-oomkilled-pod-increase-memory-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-commands-for-kubernetes-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/impact-missing-protect-kernel-defaults-kubelet-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/mutatingadmissionwebhook-sidecar-injector-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-non-root-containers-gatekeeper-rego-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/securing-etcd-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cap-sys-time-linux-capability-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-failurepolicy-ignore-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cis-benchmark-kube-apiserver-settings-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sbom-generation-analysis-tools-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-context-runasuser-non-root-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-nodeselector-pod-scheduling-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-image-security-best-practices-non-root-minimal-base-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/dropping-net-raw-capability-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/purpose-of-non-root-user-in-containers-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cosign-sign-command-container-image-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubelet-authentication-authorization-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-software-supply-chain-kubernetes-native-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encryption-provider-config-flag-location-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/list-validating-mutating-webhook-configurations-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-kube-bench-anonymous-auth-failure-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-apparmor-enforce-mode-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-runnonroot-securitycontext-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-signed-container-image-cosign-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-master-node-checks-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-hunter-remediation-upgrade-anonymous-auth-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crashloopbackoff-container-command-failure-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encryption-key-storage-encryptionconfiguration-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-logging-configuration-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/readonlyrootfilesystem-purpose-security-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/psp-capabilities-empty-allowedcapabilities-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-privilege-escalation-allowprivilegeescalation-false-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-check-1-1-1-remediation-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-admission-controllers-security-roles-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-complain-mode-pod-behavior-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/verify-secret-encryption-at-rest-etcdctl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforcing-non-root-cluster-wide-with-opa-gatekeeper-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/validatingwebhookconfiguration-clientconfig-service-reference-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/enforce-trusted-container-registry-imagepolicywebhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/admission-controller-order-mutating-validating-2-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-anonymous-auth-enable-rbac-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/immutable-root-filesystem-effect-kubectl-exec-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-scan-container-images-ci-cd-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/reduce-kubernetes-audit-logging-etcd-load-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-kubelet-anonymous-auth-failure-reason-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-egress-traffic-kubernetes-networkpolicy-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/adding-capabilities-under-baseline-pod-security-standard-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-container-network-sniffing-host-network-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-profile-mitigate-container-cve-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/sign-container-images-cosign-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disabling-unnecessary-services-kubernetes-worker-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-rule-priority-field-meaning-severity-level-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-kubernetes-secrets-storage-methods-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-etcd-access-methods-tls-rbac-firewall-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-detect-read-etc-shadow-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-syscall-shell-detection-execve-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-placement-order-mutating-webhooks-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/seccomp-localhost-profile-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/crictl-ps-no-containers-kubectl-pods-running-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rolebinding-clusterrole-namespace-scope-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimal-rbac-service-account-list-pods-all-namespaces-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-container-hardening-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/configure-gvisor-runtimeclass-pod-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-secrets-as-environment-variables-mutating-webhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-admission-controller-approved-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secrets-mount-volume-vs-env-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-security-tools-matching-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/etcd-security-configuration-tls-rbac-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-service-account-token-automount-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/trivy-fs-scan-build-context-filesystem-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/disable-swap-on-kubernetes-node-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-log-retention-tamper-proof-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/rotate-kubernetes-api-server-certificate-steps-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubectl-auth-can-i-rbac-check-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/apparmor-profile-modes-enforce-complain-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kyverno-webhook-failure-policy-ignore-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/view-audit-policy-file-path-kube-apiserver-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/fix-runasnonroot-container-error-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/imagepolicywebhook-signed-images-enforcement-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/debug-gatekeeper-constraint-rejection-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/securing-container-images-and-runtime-best-practices-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-secrets-volume-mount-best-practice-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/api-server-rbac-authorization-mode-flags-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/prevent-pod-host-network-namespace-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/cluster-admin-service-account-risk-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-certificate-types-api-server-kubelet-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standard-levels-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/gvisor-runtimeclass-container-sandbox-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/minimize-microservice-vulnerabilities-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kubernetes-audit-policy-specific-resources-secrets-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/drop-all-capabilities-then-add-specific-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/create-validatingwebhookconfiguration-kubectl-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/combined-image-security-kyverno-imagepolicywebhook-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/restrict-host-network-pod-security-admission-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/falco-indicators-compromise-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/container-sandboxing-kata-gvisor-runtimeclass-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/in-toto-signed-attestations-ci-cd-pipeline-images-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/preserve-forensic-evidence-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/encrypt-secrets-at-rest-kubernetes-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/add-net-admin-capability-iptables-container-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/kube-bench-command-cis-compliance-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/detect-anomalous-process-execution-containers-falco-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/pod-security-standards-restricted-seccomp-enforce-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/remediate-overprivileged-serviceaccount-rbac-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://courseiva.com/questions/cncf/cncf-cks/secure-public-image-registry-usage-cncf-cks</loc>
    <lastmod>2026-07-10</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
</urlset>