| Topic | Details |
| Topic 1 | - Kubernetes Threat Model: This section of the exam measures the skills of a Cloud Security Architect and involves identifying and mitigating potential threats to a Kubernetes cluster. It requires understanding common attack vectors like privilege escalation, denial of service, malicious code execution, and network-based attacks, as well as strategies to protect sensitive data and prevent an attacker from gaining persistence within the environment.
|
| Topic 2 | - Kubernetes Cluster Component Security: This section of the exam measures the skills of a Kubernetes Administrator and focuses on securing the core components that make up a Kubernetes cluster. It encompasses the security configuration and potential vulnerabilities of essential parts such as the API server, etcd, kubelet, container runtime, and networking elements, ensuring each component is hardened against attacks.
|
| Topic 3 | - Kubernetes Security Fundamentals: This section of the exam measures the skills of a Kubernetes Administrator and covers the primary security mechanisms within Kubernetes. This includes implementing pod security standards and admissions, configuring robust authentication and authorization systems like RBAC, managing secrets properly, and using network policies and audit logging to enforce isolation and monitor cluster activity.
|
| Topic 4 | - Overview of Cloud Native Security: This section of the exam measures the skills of a Cloud Security Architect and covers the foundational security principles of cloud-native environments. It includes an understanding of the 4Cs security model, the shared responsibility model for cloud infrastructure, common security controls and compliance frameworks, and techniques for isolating resources and securing artifacts like container images and application code.
|