Jia:
Couple of questions:
- Will packages be already installed in exam such as for trivy, falco,apparmor etc? if not will they share the steps? also K8s docs dont have all data about above information
- If someone has bookmarks for CKS exam please please share, would be helpful
- Do we have partial markings in exam? or if half is right and half is wrong, the whole question gets zero points
- In mock1, in kube-bench, how do we do the chown of etcd, it had ps -ef but where will we do it ? /var/answers dont detail the kube-bench question, if in exam we have corrected 5 out of 10, will it count
- Are mock exams/lab enough to pass the test ?
Please help
Jia:
In mock1, in kube-bench, how do we do the chown of etcd, it had ps -ef but where will we do it ? /var/answers dont detail the kube-bench question, if in exam we have corrected 5 out of 10, will it count
—> the answer from report was not clear to me thats why this question is raised, any suggestions
Jia:
also, for third party services we dont have docs in K8s, how does that work? do we have access to their docs specially some of the services like falco ?
Jia:
yes also if someone shares their bookmark, can compare and make sure i havent missed anything, in CKA course someone from Mumshad’s team had shared the bookmarks to compare, why we dont have that level of help in CKS exam ?
Fernando Jordan Silva:
At the begging of the exam or even in the exam’s instructions you will find a full list of the external documentation sites that you can acces. They are the sites of the main tools that you can use (kube-bench, falco, trivy….)
If in the kube-bench report you can’t find the command line to use, you can find it downloading the CIS benchmark for kubernetes 1.16
dharmaraj upase:
from cncd documentation
use their Chrome or Chromium browser to open one additional tab in order to access
• Kubernetes Documentation:
◦ https://kubernetes.io/docs/ and their subdomains
◦ https://github.com/kubernetes/ and their subdomains
◦ https://kubernetes.io/blog/ and their subdomains
• This includes all available language translations of these pages (e.g. https://kubernetes.io/zh/docs/https://kubernetes.io/zh/docs/home/|)
• Tools:
◦ Trivy documentation https://github.com/aquasecurity/trivy
◦ Sysdig documentation https://docs.sysdig.com/
◦ Falco documentation https://falco.org/docs/
• This includes all available language translations of these pages (e.g. https://falco.org/zh/docs/)
• App Armor:
◦ Documentation https://gitlab.com/apparmor/apparmor/-/wikis/Documentation
• The allowed sites above may contain links that point to external sites. It is the responsibility of the candidate not to click any links to navigate to a domain that is not allowed