Compendium Centrum Edukacyjne

The AWS Certified Security - Specialty exam is intended for individuals who have a responsibility to secure cloud solutions. The exam validates a candidate's ability to effectively demonstrate knowledge about securing AWS products and services.

The exam also validates a candidate's ability to complete the following tasks:

• Apply specialized data classifications and AWS data protection mechanisms.
• Implement data-encryption methods and AWS encryption mechanisms.
• Implement AWS mechanisms to follow secure internet protocols.
• Use AWS security services and features to ensure secure production environments.
• Make decisions that account for tradeoffs between cost, security, and deployment complexity to meet a set of application requirements.
• Understand security operations and risks.

Target candidate

The target candidate should have the equivalent of 3–5 years of experience securing cloud solutions.

Recommended AWS knowledge

The target candidate should have the following AWS knowledge:

• The AWS shared responsibility model and its application
• Managing identity at scale
• Multi-account governance
• Managing software supply chain risks
• Security incident prevention and response strategies
• Vulnerability management in the cloud
• Developing firewall rules at scale for layers 3–7
• Incident root cause analysis
• Experience responding to an audit
• Logging and monitoring strategies
• Data encryption methodologies, both at-rest and in-transit
• Disaster recovery controls, including backup strategies

Domains & Competencies

• Domain 1: Detection (16% of scored content)
• Domain 2: Incident Response (14% of scored content)
• Domain 3: Infrastructure Security (18% of scored content)
• Domain 4: Identity and Access Management (20% of scored content)
• Domain 5: Data Protection (18% of scored content)
• Domain 6: Security Foundations and Governance (14% of scored content)

Detailed described domains, list of specific tools and technologies that might be covered on the exam, as well as lists of in-scope AWS services https://docs.aws.amazon.com/aws-certification/latest/examguides/security-specialty-02.html

Exam overview

Level: Specialty

Length: 170 minutes to complete the exam

Cost: 300 USD (*when purchasing directly from AWS)

Visit Exam pricing for additional cost information.

Format: 65 questions; either multiple choice or multiple response.

Delivery method: Pearson VUE testing center or online proctored exam.