CNCF-KCSA Exam Information and Outline
Kubernetes and Cloud Security Associate
Syllabus Update Checked on: October 30, 2026
CNCF-KCSA Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official CNCF-KCSA exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
CNCF.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 60 multiple-choice questions; 90 minutes; online proctored
- Overview of Cloud Native Security (14%)
- The 4Cs of cloud native security
- Cloud provider and infrastructure security
- Controls, frameworks and isolation techniques
- Artifact repository, image and workload security
- Kubernetes Cluster Component Security (22%)
- API server, controller manager, scheduler, kubelet
- Container runtime, kube-proxy, pods, etcd
- Container networking and storage
- Kubernetes Security Fundamentals (22%)
- Pod Security Standards and admission
- Authentication, authorization (RBAC) and secrets
- Isolation and segmentation, audit logging, network policy
- Kubernetes Threat Model (16%)
- Trust boundaries and data flow
- Persistence, denial of service and malicious code execution
- Network attacker, access to sensitive data, privilege escalation
- Platform Security (16%)
- Supply chain security and image repositories
- Observability, service mesh and PKI
- Connectivity and admission control
- Compliance and Security Frameworks (10%)
- Compliance frameworks and threat modelling frameworks
- Supply chain compliance and automation tooling