Lab
A Cloud Guru

Certified Kubernetes Security Specialist (CKS) - Practice Exam Part 8

This lab provides practice scenarios to help prepare you for the Certified Kubernetes Security Specialist (CKS) exam. You will be presented with tasks to complete, as well as server(s) and/or an existing Kubernetes cluster to complete them in. You will need to use your knowledge of Kubernetes to successfully complete the provided tasks, much like you would on the real CKS exam. Good luck!

Try for free Contact sales

Path Info

Level

Advanced

Duration

30m

Published

Jun 10, 2021

Challenge

Add Rules to the Cluster's Audit Policy
The cluster has an audit policy configured. The audit policy file is located at /etc/kubernetes/audit-policy.yaml. Add the following rules to the audit policy:
1. Log the request and response body for changes to configmaps.
2. Log the request body for changes to services and pods in the web namespace.
3. Log metadata for changes to secrets.
4. Create a catch-all rule to log metadata for all remaining requests.
Challenge

Configure Audit Logging
1. Configure audit logging for the cluster.
2. Direct audit log output to a file located at /var/log/kubernetes/audit.log.
3. Maintain old log files for a maximum of 10 days.
4. Keep a maximum of 1 old log files.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.