KCSA Preparation
Workshop

• The 4Cs of Cloud Native Security
• Image Security and Artifact Repositories
• Control Plane Security: API Server, etcd and Scheduler
• Node Security: Kubelet, Container Runtime and KubeProxy
• Container Networking, Storage and Client Security

• Pod Security Standards and Pod Security Admissions
• Authentication and Authorization with RBAC
• Secrets Management, Namespace Isolation and Audit Logging
• Writing and Testing Network Policies
• Kubernetes Threat Model: Attack Vectors and Mitigations

• Runtime Security with Falco
• Policy Enforcement with OPA Gatekeeper and Admission Control
• Supply Chain Security, PKI and Service Mesh
• Compliance Frameworks and Security Tooling
• KCSA Exam Preparation: Format, Strategy and Sample Questions

Official window for open sessions.

On day 1: meet the instructor and participants, plus the agenda and workshop structure.

On later days, resolve open questions from the previous day before the day’s topics (usually 09:00–09:30 or 09:00–10:00).

Theory and hands-on in the morning and afternoon blocks. The topic list is in the curriculum above.

A shared break before the afternoon.

End of the day: questions, exchange and wrap-up.

Your own notebook (Linux, macOS or Windows) with permission to install software. Devices available at extra cost.

Each participant works in a provided cloud lab. Local installation of the training stack is not required.

Basic Linux/terminal skills are helpful.