KCSA — Kubernetes Threat Model
Kubernetes Threat Model
The Kubernetes Threat Model domain accounts for 16% of the KCSA exam. This domain tests your understanding of how attackers target Kubernetes environments, what attack surfaces exist, and how to systematically identify and mitigate threats.
Threat modeling is not about memorizing exploit code — it is about understanding what can go wrong, who might attack, and how to defend your cluster at every layer.
What You Will Learn
This chapter walks you through a structured approach to Kubernetes security threats — from foundational frameworks to real-world attack scenarios and their mitigations.
| # | Topic | Description |
|---|---|---|
| 1 | Threat Modeling Fundamentals | STRIDE model, attack trees, threat actors |
| 2 | Kubernetes Attack Surface | Control plane, data plane, supply chain entry points |
| 3 | Common Attack Vectors | Container escape, privilege escalation, lateral movement |
| 4 | Kubernetes-Specific Threats | RBAC misconfig, exposed dashboards, etcd access, malicious images |
| 5 | Mitigation Strategies | Defense layers mapped to threats, security controls matrix |
After completing all five sub-topics, test yourself with the Practice Questions.
Why This Domain Matters
Kubernetes is a complex distributed system with many components communicating over the network. Each component — the API server, etcd, kubelet, container runtime, and the workloads themselves — introduces potential attack surfaces.
A threat model helps you:
- Identify what assets need protection (Secrets, workloads, cluster state)
- Enumerate who might attack (external actors, insiders, compromised supply chains)
- Understand how attacks unfold (privilege escalation paths, lateral movement)
- Prioritize defenses based on risk (likelihood × impact)
The KCSA exam expects you to recognize threats, map them to Kubernetes components, and select the correct mitigation — all at a conceptual level.
Prerequisites
Before starting this chapter, make sure you are comfortable with:
- Chapter 1 — Overview of Cloud Native Security (security principles, defense in depth)
- Chapter 2 — Kubernetes Cluster Component Security (API server, etcd, kubelet)
- Chapter 3 — Kubernetes Security Fundamentals (RBAC, Security Context, NetworkPolicy)
- Chapter 4 — Platform Security (node hardening, CIS Benchmarks)
- Chapter 5 — Compliance and Security Frameworks (governance, audit)
These chapters provide the building blocks that this chapter ties together through a threat-centric lens.
Exam Tips
- Questions in this domain are scenario-based — you will be given a situation and asked to identify the threat category or the correct mitigation.
- Know the STRIDE model cold — it is the most commonly referenced threat modeling framework.
- Understand the Kubernetes attack kill chain — from initial access to data exfiltration.
- Be able to map threats to mitigations (e.g., container escape → Security Context, lateral movement → NetworkPolicy).
Ready to Begin?
Start with the first topic to build a strong foundation in threat modeling concepts.
Start: Threat Modeling Fundamentals
