Course Catalog
Advanced Kubernetes Security (CN330)
Code: Kubernetes securi
Duration: 2 Day
$1995 - $2000 USD

OVERVIEW

Advanced Kubernetes Security course focuses on developing the skills and knowledge needed for implementing security measures from code to a production Kubernetes cluster. Students will engage in topics pertaining to adding security mechanisms along the code deployment pipeline and reviewing and remediating security concerns within a Kubernetes infrastructure.

Topics include declarative configuration analysis, container image scanning, CIS benchmark scanning and remediation, and identifying and mitigating attack vectors within Kubernetes. Kubernetes Operations and System Integration teams will benefit greatly as they work towards creating a security posture that aligns with security policies for their Kubernetes environments.

DELIVERY FORMAT

This course is available in the following formats:

Virtual Classroom

Duration: 2 Day
Classroom

Duration: 2 Day

CLASS SCHEDULE

Delivery Format: Virtual Classroom
Date: May 02 2024 - May 03 2024 | 09:00 - 17:00 EST
Location: Online
Course Length: 2 Day

$ 1995

GOALS

You will learn declarative configuration analysis, container image scanning, CIS benchmark scanning and remediation, and identifying and mitigating attack vectors within Kubernetes.

OUTLINE

  • Kubernetes Threat Model and Security Maturity
  • System Hardening
  • Overview of Cluster Security objects
  • Cluster Hardening
  • Minimizing Microservice Vulnerabilities
  • Securing the Container Supply Chain
  • Monitoring, Logging and Runtime Security
  • Kubernetes Threat Model and Security Maturity
  • System Hardening
  • Overview of Cluster Security objects
  • Cluster Hardening
  • Minimizing Microservice Vulnerabilities
  • Securing the Container Supply Chain
  • Monitoring, Logging and Runtime Security
LABS

  • Laptop with WiFi connectivity
  • Attendees should have the latest Chrome or Firefox installed, and a free account at strigo.io.
  • Laptop with WiFi connectivity
  • Attendees should have the latest Chrome or Firefox installed, and a free account at strigo.io.
WHO SHOULD ATTEND

This course is targeted at students with the following:

  • Motivations: Responsibility for implementing security mechanisms along the code deployment pipeline and within the Kubernetes environment; Running and reporting on security state of the Kubernetes environment
  • Roles: Infrastructure and Integration engineers tasked with implementing, running, and reporting on security posture of Kubernetes environment; Developers who are tasked with scanning and remediating security issues within application coding; IT professionals looking to expand their skills in Kubernetes security
PREREQUISITES

  • Familiarity with the bash shell
  • Filesystem navigation and manipulation
  • Command line text editors like vim or nano
  • Common tooling like curl, wget and ping
  • CN220 – Kubernetes Operations (or equivalent) experience or have earned the Certified Kubernetes Administrator (CKA) certification