KCSA — Kubernetes and Cloud Native Security Associate
KCSA Certification Tutorial
Welcome to the KCSA (Kubernetes and Cloud Native Security Associate) tutorial track. This series covers the security fundamentals of Kubernetes and cloud-native environments, preparing you for the KCSA exam.
What is KCSA?
The KCSA certification is offered by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. It demonstrates your foundational knowledge of security concepts and best practices in cloud-native and Kubernetes environments.
Exam Details
| Detail | Info |
|---|---|
| Duration | 90 minutes |
| Format | Multiple choice |
| Passing Score | 75% |
| Validity | 3 years |
| Cost | $250 USD (includes one free retake) |
| Prerequisites | None (Foundation tutorial recommended) |
KCSA Exam Domains
| Domain | Weight |
|---|---|
| Overview of Cloud Native Security | 14% |
| Kubernetes Cluster Component Security | 22% |
| Kubernetes Security Fundamentals | 22% |
| Kubernetes Threat Model | 16% |
| Platform Security | 16% |
| Compliance and Security Frameworks | 10% |
What You’ll Learn
- Cloud-native security principles and the 4C model (Cloud, Cluster, Container, Code)
- Kubernetes API server security and authentication mechanisms
- RBAC design patterns and ServiceAccount best practices
- Kubernetes threat modeling and common attack vectors
- Container security fundamentals (image scanning, runtime protection)
- Network security with network policies and service mesh
- Supply chain security (SBOM, image signing, admission control)
- Compliance frameworks relevant to cloud-native (SOC 2, CIS Benchmarks)
- Kubernetes audit logging and security monitoring
Prerequisites
Before starting this track, you should have completed the Kubernetes Foundation Tutorial or have equivalent hands-on experience with Kubernetes core concepts.
Chapters
| # | Chapter | Exam Domain | Weight |
|---|---|---|---|
| 1 | Introduction | — | — |
| 2 | Cloud Native Security Overview | Overview of Cloud Native Security | 14% |
| 3 | Cluster Component Security | Kubernetes Cluster Component Security | 22% |
| 4 | Authentication & Authorization | Kubernetes Security Fundamentals | 22% |
| 5 | Pod & Network Security | Kubernetes Security Fundamentals | 22% |
| 6 | Kubernetes Threat Model | Kubernetes Threat Model | 16% |
| 7 | Platform Security | Platform Security | 16% |
| 8 | Compliance & Security Frameworks | Compliance and Security Frameworks | 10% |
| 9 | Cloud Native Security Tools | Platform Security | 16% |
| 10 | Exam Tips & Mock Exam | All Domains | — |
