AWS Certified Security - Specialty Practice Exam

The AWS Certified Security - Specialty exam validates your expertise in securing and hardening workloads and architectures on the AWS cloud platform.  Earning this certification demonstrates your ability to implement best practices for cloud security, identify and remediate security risks, and ensure compliance with security standards.

Who Should Take This Exam?

This certification is ideal for experienced security professionals with a strong understanding of AWS services and a focus on cloud security:

• Security architects and engineers
• Cloud security specialists
• Security operations centre (SOC) analysts focused on AWS security

Prerequisites

The recommended prerequisite is five years of IT security experience in designing and implementing security solutions, with at least two years of hands-on experience specifically securing AWS workloads.

Roles and Responsibilities

• Cloud Security Architects: Design and implement secure cloud architectures on AWS.
• Security Engineers: Secure and harden AWS deployments to mitigate risks.
• Cloud Security Analysts: Monitor and analyze security threats within the AWS cloud environment.
• Security Auditors: Assess the effectiveness of security controls for AWS deployments.

Exam Details

• Exam Code: (SCS-C01)
• Types of Questions: Multiple choice, multiple answers
• Length: 170 minutes, 65 questions
• Languages: English, Japanese, Korean, Simplified Chinese
• Registration Fee: 300 USD
• Passing score: 75% - 80%
• Validity: 3 years

Course Outline

Module  1: Learninging about Incident Response (12%) 

• Learning to assess the suspected compromised instance or exposed access keys.
• Learning to evaluate the Incident Response plan with relevant AWS services.
• Learning to assess the configuration of automated alerting,
• Learning to implement possible remediation of security-related incidents and issues.

Module 2: Describe Logging and Monitoring (20%)

• Learning designing and implementation of security monitoring and alerting.
• Learning to troubleshoot security monitoring and alerting.
• Learning designing and implementing a logging solution.
• Learning Troubleshooting logging solutions.

Module 3: Describe Infrastructure Security (26%)

• Learning designing edge security on AWS.
• Learning designing and implementing a secure network infrastructure. 
• Learning troubleshooting a secure network infrastructure.
• Learning designing and implementing host-based security.

Module 4: Describe Identity and Access Management (20%)

• Learning designing and implementing a scalable authorization and authentication system for accessing AWS resources. 
• Learning troubleshooting an authorization and authentication system for accessing AWS resources.

Module 5: Describe Data Protection (22%)

• Learning designing and implementing key management and use.
• Learning troubleshooting key management.
• Learning designing and implementing a data encryption solution (both for data in-transit and data at rest)