AWS Certified Security - Specialty (SCS-C02) Crash Course
Published by Pearson
Your Ultimate Guide to Passing the SCS-C02 Exam
- Learn what’s new in the AWS SCS-C02 exam and review all objectives so you can successfully prepare for the exam
- Explore the principles and uses for AWS’s key security services and features
- Understand security implementation patterns to successfully study for the exam and do the work
- Participate in deep-dive question scenarios and learn best practices for passing the exam
AWS has a whole new AWS Certified Security exam. The SCS-C02 explores new knowledge areas, services, domains and features and it’s crucial that you understand these before taking the test. In this two-day course you will get targeted training on the core objectives covered in the exam, so you have the knowledge you need to successfully achieve certification. Included in this course are introductions and explanations of each of the exam question domains, with a strong focus on the strategies and principles that the exam scenarios will be drawn from. You will also explore how to approach, understand, and answer real-world practice questions so you can learn how to eliminate the incorrect answers and navigate the exam successfully. Finally, best-selling author and trainer Chad Smith will share his extensive knowledge of the AWS Certified Security Specialty exam so you can learn best practices and prepare for exam day with confidence.
AWS Certifications are among the most sought-after in the technology sector, and the certification exams cover a wide range of services, technologies, and implementation patterns.
What you’ll learn and how you can apply it
- How incident response and threat detection can be implemented using AWS services
- How to design and implement AWS security logging, auditing, and analysis
- How to design, implement, and troubleshoot network and compute infrastructure security
- How to design, implement, and troubleshoot scalable authentication and authorization systems in AWS
- How to protect data using various methods including lifecycle management, encryption and key management
- How to develop and implement centralized security management and evaluate compliance of AWS resources
And you’ll be able to:
- Implement a security auditing of AWS resources while understanding how to prioritize the results
- Compare the benefits and tradeoffs of implementing least privilege security permissions in AWS
- Configure event-driven security monitoring and mitigation using AWS native security services
- Understand risk and compliance management in a complex multi-account scenario
This live event is for you because...
- You are an AWS technology professional who wants to improve your security domain knowledge
- You are an Infrastructure or Security architect responsible for designing systems that will be deployed onto AWS
- You are a security specialist who will be managing/auditing AWS resources
Prerequisites
- Intermediate understanding of common technology topics including IPv4 networking, virtual machines, cloud storage options, as well as multi-tier and serverless applications
- Intermediate knowledge of common AWS services such as VPC, EC2, S3, IAM, Organizations, WAF and others
- Experience with encryption technologies and disaster recovery patterns
Recommended Preparation
- Watch: Amazon Web Services AWS LiveLessons 3rd Edition, by Chad Smith:
- Watch: AWS Certified Solutions Architect Associate (SAA-C03)
Recommended Follow-up
- Watch: AWS Certified SysOps Administrator - Associate (SOA-C02), by Chad Smith
- Watch: AWS Certified Security - Specialty, by Chad Smith
Schedule
The time frames are only estimates and may vary according to how the class is progressing.
Day 1
Exam guide and general strategies - 30m
- Exam logistics
- Exam guide discussion
- Question domain explanation
Question Domain 1: Threat Detection and Incident Response - 45m
- Design and Implement an Incident Response Plan
- Detect security threats and anomalies by using AWS services
- Break - 10m
- Respond to compromised resources and workloads
Question Domain 2: Security Monitoring and Logging - 75m
- Design and implement monitoring and alerting to address security events
- Troubleshoot security monitoring and alerting
- Break - 10m
- Design and implement a logging solution
- Troubleshoot logging solutions
- Design a log analysis solution
Question Domain 3: Infrastructure Security - 80m
- Design and implement security controls for edge services
- Break - 10m
- Design and implement network security controls
- Design and implement security controls for compute workloads
- Troubleshoot network security
Q&A - 10m
Day 2
Question Domain 4: Identity and Access Management - 75m
- Design, implement, and troubleshoot authentication for AWS resources
- Break - 10m
- Design, implement, and troubleshoot authorization for AWS resources
Question Domain 5: Data Protection - 90m
- Design and implement controls that provide confidentiality and integrity for data in transit
- Design and implement controls that provide confidentiality and integrity for data at rest
- Break - 10m
- Design and implement controls to manage the lifecycle of data at rest
Question Domain 6: Management and Security Governance - 65m
- Develop a strategy to centrally deploy and manage AWS accounts
- Implement a secure and consistent deployment strategy for cloud resources
- Break - 10m
- Evaluate the compliance of AWS resources
- Identify security gaps through architectural reviews and cost analysis
Q&A - 10m
Your Instructor
Chad Smith
Chad Smith is a technology professional, author and trainer focused on cloud infrastructure and management. He is the Principal Cloud Architect at Brightkey.cloud and has a wealth of personal real-world experience in cloud adoption, infrastructure design, operations and security. Chad holds current AWS certifications in Architecture, SysOps, Security, Networking and Databases and is also certified in CompTIA Cloud+.