AWS Cloud Security Certification

 

AWS Certified Security – Specialty (SCS-C01) Exam Guide

 

Introduction

 

The AWS Certified Security - Specialty (SCS-C01) examination is intended for individuals who perform a security role. This exam validates an examinee’s ability to effectively demonstrate knowledge about securing the AWS platform.

 

 It validates an examinee’s ability to demonstrate:

 

 · An understanding of specialized data classifications and AWS data protection mechanisms.

·  An understanding of data-encryption methods and AWS mechanisms to implement them.

·  An understanding of secure Internet protocols and AWS mechanisms to implement them.

 · A working knowledge of AWS security services and features of services to provide a secure production environment.

 · Competency gained from two or more years of production deployment experience using AWS security services and features.

 · The ability to make tradeoff decisions with regard to cost, security, and deployment complexity given a set of application requirements.

 · An understanding of security operations and risks.

 

Domain 1: Incident Response 12%

Domain 2: Logging and Monitoring 20%

Domain 3: Infrastructure Security 26%

Domain 4: Identity and Access Management 20%

Domain 5: Data Protection 22%

TOTAL 100%

 

 

Domain 1: Incident Response

 

1.1 Given an AWS abuse notice evaluate the suspected compromised instance or exposed access keys.

1.2 Verify that the Incident Response plan includes relevant AWS services.

1.3 Evaluate the configuration of automated alerting, and execute possible remediation of security-related

incidents and emerging issues.

 

Domain 2: Logging and Monitoring

 

2.1 Design and implement security monitoring and alerting.

2.2 Troubleshoot security monitoring and alerting.

2.3 Design and implement a logging solution.

2.4 Troubleshoot logging solutions.

 

Domain 3: Infrastructure Security

3.1 Design edge security on AWS.

3.2 Design and implement a secure network infrastructure.

3.3 Troubleshoot a secure network infrastructure.

3.4 Design and implement host-based security.

 

Domain 4: Identity and Access Management

4.1 Design and implement a scalable authorization and authentication system to access AWS resources.

4.2 Troubleshoot an authorization and authentication system to access AWS resources.

 

Domain 5: Data Protection

5.1 Design and implement key management and use.

5.2 Troubleshoot key management.

5.3 Design and implement a data encryption solution for data at rest and data in transit.

 

All other course content: https://www.virajetech.com/buy-courses/173

 

WhatsApp us: 91-8618501719

Email us: info@virajetech.com

LMS library: http://www.livecourses.co.in  

Download our app: https://play.google.com/store/apps/details?id=com.courses.virajetech

How to use app: https://youtu.be/X4K_IVEUkVY

Open learning University: https://t.me/virajetechjobsandtraining

 

*WE PROVIDE THE JOBS SUPPORT*

JOBS REGISTRATION LINK: https://www.virajetech.com/it-jobs-registration

Join Group: https://chat.whatsapp.com/DdFTJEISTuIE4a0nuM8s6T

 

Recommended AWS Knowledge

 · A minimum of 5 years of IT security experience, designing and implementing security solutions

 · At least 2 years of hands-on experience securing AWS workloads

 · Security controls for workloads on AWS

 

Exam Content

 

Response Types

 

There are two types of questions on the examination:

 Multiple choice: Has one correct response and three incorrect responses (distractors).

 Multiple response: Has two or more correct responses out of five or more options.

 

Select one or more responses that best complete the statement or answer the question. Distractors, or incorrect

answers are response options that an examinee with incomplete knowledge or skill would likely choose. However,

they are generally plausible responses that fit in the content area defined by the test objective.

Unanswered questions are scored as incorrect; there is no penalty for guessing.

 

Unscored Content

Your examination may include unscored items that are placed on the test to gather statistical information. These

items are not identified on the form and do not affect your score.

 

 

Exam Results

The AWS Certified Security - Specialty (SCS-C01) examination is a pass or fail exam. The examination is scored

against a minimum standard established by AWS professionals who are guided by certification industry best

practices and guidelines.

 

 

Your results for the examination are reported as a score from 100–1,000, with a minimum passing score of 750.

Your score shows how you performed on the examination as a whole and whether you passed. Scaled

scoring models are used to equate scores across multiple exam forms that may have slightly different difficulty

levels.

 

Your score report contains a table of classifications of your performance at each section level. This information is

designed to provide general feedback concerning your examination performance. The examination uses a

compensatory scoring model, which means that you do not need to “pass” the individual sections, only the overall

examination. Each section of the examination has a specific weighting, so some sections have more questions than

others. The table contains general information, highlighting your strengths and weaknesses. Exercise caution when

interpreting section-level feedback.

 

Exam Details

Format

65 questions; either multiple choice or multiple response

Type

Specialty

 

Delivery Method
Testing center or online proctored exam

Time

170 minutes to complete the exam

Cost

300 USD (Practice exam: 40 USD)

Language

Available in English, Japanese, Korean, and Simplified Chinese