AWS Certified Security – Specialty (SCS-C01) - Tips for Preparation

I was looking to do another certification in the AWS space after completing my certification in AWS Solutions Architect (Associate) in March 2020. I came across this quote while researching.

This quote and Mphasis's "TalentNext' program's recommendation was tempting enough for me to take up the course and subsequently the certification.

I passed the certification exam on July 31, 2020. While it is still fresh, I wanted to capture a few tips for those who would like to take up the certification. So here you go;

Here is where you can start -

Pre-requisites: AWS doesn't mandate prior certifications to be taken before taking up the AWS Certified Security – Specialty (SCS-C01). In spite of this being an 'Advanced' level exam.

I strongly suggest that you complete the AWS Certified Solutions Architect - Associate, certification. At the very least, cover a course that spans this certification content. I recommend this one -

Exam Cost - If you are planning to visit a test center for the exam, the cost will be USD 300, through PSI. If you have completed a prior certification, then AWS provides a 50% discount code under the benefits section (visit aws.training).

I took my exams through PearsonVue (online). They charge USD 354. With the discount, it cost me USD 177.

Training Course - I highly recommend this course.

This is presented by an Indian Trainer, Zeal Vora. I felt he could do better on keeping things crisp, examples used, and also explaining the solutions for all the questions at the back end of the course. Overall though, the course is focused on the exam, while also giving a good view of real-world security-related scenarios. It was great to see the sheer number of questions that appeared in the exam which were straight out of the practice exam in the course. I also really liked the exam-focused recap at the end of the course.

Whitepapers - This is not mandatory, however, I did skim through many of the Security related whitepapers. It helped to reinforce the learning from the course. Here is a list;

1. AWS Overview
2. AWS Security Best Practices
3. AWS Security Pillar
4. Introduction to Security By Design
5. AWS Overview of Security Processes
6. AWS Well-Architected Framework
7. NIST Cybersecurity Framework
8. AWS Risk And Compliance
9. AWS Security Checklist
10. AWS HIPAA Compliance Whitepaper
11. Overview of AWS Lambda Security
12. AWS Security Incident Response
13. AWS KMS Best Practices
14. Encrypting File Data with Amazon Elastic File System
15. Security of AWS CloudHSM backups
16. AWS Cloud Adoption Framework
17. AWS CAF Security perspective
18. AWS Auditing Security Checklist
19. Introduction to AWS Security Processes
20. AWS CIS Foundation benchmark
21. Security overview of AWS Lambda

AWS Course - https://www.aws.training/Details/Curriculum?id=10795 - I went through this after I got certified. I found this invaluable in terms of the depth of the information and education that this provides.

Exam Practice - Braincert has a good set of 4 exams that I recommend taking before you take up the actual exam. Cost - USD 25

I found that almost all the questions from Braincert.com are also available free on websites such as examtopics.com. However, Braincert.com gives the feel of an actual timed exam, and their explanations are top-notch.

Overall it took me about 3 months of course work and an additional 2 weeks of exam-focused preparation to get through. I spent an average of 45 min a day during this time. However, most of these efforts came during the 2 weeks leading up to the exam.

The exam itself was a challenging one. There were a total of 65 questions with 170 minutes to complete. I found myself spending more than 5 minutes on a few of the questions. In the end, I didn't have time to review all my answers.

I wish you the very best if you are planning to take up the exam. Let me know if you have any questions. You can use the comments section. I will answer the best I can.