Course and practice questions
Security Specialty course
Security – Specialty (SCS-C03): 6 modules, 16 lessons and 6 quizzes. This exam is multiple choice, so the practice is the course and original questions. The lab runtime is kubeadm clusters only, and this page does not include an AWS account.
What's included
A course and practice questions
6 modules, 16 lessons and 6 quizzes (48 original questions). About 2 h 54 min of reading. The lab runtime is kubeadm clusters only, so this page does not include an AWS account.
6 modules
16 lessons mapped to the domains in the public exam guide.
6 quizzes
48 original practice questions, with an explanation for every answer. They are not exam items.
170-minute exam
The length published for this exam. This page does not offer a timed mock.
Exam domains
Domains from the public guide
The domain weights below sum to 100. The official page is the source of truth: Security – Specialty exam page.
Identity and Access Management
20%of the exam
2 competencies
- Design, implement, and troubleshoot authentication strategies
- Design, implement, and troubleshoot authorization strategies
Infrastructure Security
18%of the exam
3 competencies
- Design, implement, and troubleshoot security controls for network edge services
- Design, implement, and troubleshoot security controls for compute workloads
- Design and troubleshoot network security controls
Data Protection
18%of the exam
3 competencies
- Design and implement controls for data in transit
- Design and implement controls for data at rest
- Design and implement controls to protect confidential data, credentials, secrets, and cryptographic key materials
Detection
16%of the exam
3 competencies
- Design and implement monitoring and alerting solutions for an AWS account or organization
- Design and implement logging solutions
- Troubleshoot security monitoring, logging, and alerting solutions
Incident Response
14%of the exam
2 competencies
- Design and test an incident response plan
- Respond to security events
Security Foundations and Governance
14%of the exam
3 competencies
- Develop a strategy to centrally deploy and manage AWS accounts
- Implement a secure and consistent deployment strategy for cloud resources
- Evaluate the compliance of AWS resources
Curriculum
6 modules, 16 lessons, 6 quizzes
Lesson titles from the course. The questions stay in the quizzes, and the answers are not published here.
01Detection
See the suspicious call, keep the log that proves it, and notice when the alert never arrives. Domain: Detection.
- lessonMonitoring and alerting11 min
- lessonLogging that an investigator can use11 min
- lessonWhen the alert does not fire10 min
02Incident response
Write the plan, practice it, keep the evidence, and contain the blast before you delete the instance. Domain: Incident Response.
- lessonPlan and test the response10 min
- lessonRespond without destroying the evidence12 min
03Infrastructure security
Pick the layer that matches the threat, then harden the compute and the network behind it. Domain: Infrastructure Security.
- lessonEdge controls11 min
- lessonHardening compute11 min
- lessonNetwork controls11 min
04Identity and access management
Prove who is calling, then allow only the action the task needs. Domain: Identity and Access Management.
- lessonAuthentication11 min
- lessonAuthorization12 min
05Data protection
Encrypt the path, encrypt the object, and keep keys and secrets where they can be rotated and revoked. Domain: Data Protection.
- lessonData in transit10 min
- lessonData at rest11 min
- lessonSecrets and key material11 min
06Security foundations and governance
One organization, the same baseline in every account, and evidence when someone asks. Domain: Security Foundations and Governance.
- lessonAccounts and guardrails11 min
- lessonDeploy the same control everywhere10 min
- lessonEvaluate compliance11 min
Read the Security – Specialty course
Sign up free to read the 16 lessons and take the 6 quizzes. The lab runtime is kubeadm clusters only, so this course does not include an AWS account.