AWS Certified Security - Specialty Rapid Exam Prep

There is one assessment set and two practice exams to test your knowledge.

There are two types of questions on the examination:

Multiple choice: Has one correct response and three incorrect responses (distractors).

Multiple response: Has two or more correct responses out of five or more options. Select one or more responses that best complete the statement or answer the question. Distractors, or incorrect answers, are response options that an examinee with incomplete knowledge or skill would likely choose. However, they are generally plausible responses that fit in the content area defined by the test objective.

Unanswered questions are scored as incorrect; there is no penalty for guessing.

Exam Domains

There are 5 domains being covered in this preparation kit and in the certification exam.

Domain 1: Incident Response

1.1 Given an AWS abuse notice, evaluate the suspected compromised instance or exposed access keys.

1.2 Verify that the Incident Response plan includes relevant AWS services.

1.3 Evaluate the configuration of automated alerting, and execute possible remediation of security-related incidents and emerging issues.

Domain 2: Logging and Monitoring

2.1 Design and implement security monitoring and alerting.

2.2 Troubleshoot security monitoring and alerting.

2.3 Design and implement a logging solution.

2.4 Troubleshoot logging solutions.

Domain 3: Infrastructure Security

3.1 Design edge security on AWS.

3.2 Design and implement a secure network infrastructure.

3.3 Troubleshoot a secure network infrastructure.

3.4 Design and implement host-based security.

Domain 4: Identity and Access Management

4.1 Design and implement a scalable authorization and authentication system to access AWS resources.

4.2 Troubleshoot an authorization and authentication system to access AWS resources.

Domain 5: Data Protection

5.1 Design and implement key management and use.

5.2 Troubleshoot key management.

5.3 Design and implement a data encryption solution for data at rest and data in transit.