☁️ AWS Certified Security - Specialty (SCS-C03) - Exam-Prep
Free exam-prep for AWS Certified Security - Specialty (SCS-C03) with a signed certificate. Learn the modules, pass the 10-question exam, EN/FR/AR, no account.
Last updated: June 2026
For cloud and security engineers preparing for the SCS-C03 exam: master AWS detection, incident response, infrastructure and data protection, IAM, and governance to pass with confidence. The course is organized into 8 modules, ending with a final exam (pass mark 70%). It is independent, free exam-preparation training — not an official or accredited review course.
What you'll learn
- Domain 1 — Detection: Logging, Monitoring & Threat Detection
- Domain 2: Incident Response — Containment, Forensics & Automated Remediation
- Domain 3: Infrastructure Security — VPC, Network Segmentation & Edge Protection
- Domain 3: Infrastructure Security — Compute, Host Hardening & Vulnerability Management
- Domain 4: Identity & Access Management — IAM Policies, Roles, Permission Boundaries & Least Privilege
- Domain 4: Federation, IAM Identity Center & Multi-Account Access
- Domain 5 - Data Protection: Encryption at Rest & In Transit, KMS, CloudHSM & Secrets Management
- Domain 6 - Security Foundations & Governance: Organizations, SCPs, Shared Responsibility & Exam Strategy
Learning objectives
- Design detection and monitoring with GuardDuty, Security Hub, CloudTrail, Config, and CloudWatch to surface and triage threats.
- Build and execute incident response playbooks, including credential compromise, isolation, and forensic data capture.
- Secure VPC networking and edge layers using security groups, NACLs, WAF, Shield, Network Firewall, and TLS termination.
- Engineer least-privilege access with IAM policies, roles, permission boundaries, SCPs, and federation across multiple accounts.
- Protect data at rest and in transit using AWS KMS, CloudHSM, Secrets Manager, and envelope encryption.
- Apply multi-account governance with AWS Organizations, control policies, and the shared responsibility model.
- Make cost, security, and complexity tradeoffs to choose the right AWS security control for a scenario.
- Decode SCS-C03 question styles and apply exam-day time and elimination strategies.