AWS Certified Security (Specialty)

Phoenix TS’ AWS Certified Security Specialty course is intended for individuals who perform a security role and secure AWS workloads.

An AWS Certified Security (Specialty) certification is geared towards candidates who will be expected to perform a security role with several years of practical experience securing AWS Workloads

Why Take The AWS Certified Security Course?

Your certification places you at the front of the line.

Passing the exam will allow you to attain an industry-recognized merit from AWS that says: you
know what you’re doing. It proves to your employer that you have the necessary skills and
knowledge to earn top dollar when you work for them.

Increase Your Salary:

• The average salary for an AWS Certified Security (Specialty) certification holder is around
  $67,000 / year

Abilities Validated By The Certification:

• Design, develop, and deploy cloud-based solutions using AWS
• Implement core AWS services according to basic architecture best practices
• Design and maintain network architecture for all AWS services
• Leverage tools to automate AWS networking tasks

Recommended Knowledge & Experience:

• Amazon recommends candidates hold an AWS Certified Cloud Practitioner or a current
  Associate-level certification: AWS Certified Solutions Architect – Associate, AWS Certified
  Developer – Associate or AWS Certified SysOps Administrator – Associate
• Advanced knowledge of AWS networking concepts and technologies
• Minimum five years hands-on experience architecting and implementing network solutions
• Advanced networking architectures and interconnectivity options (e.g., IP VPN, MPLS/VPLS)
• Networking technologies within the OSI model, and how they affect implementation decisions
• Development of automation scripts and tools
• CIDR and sub-netting (IPv4 and IPv6)
• IPv6 transition challenges
• Generic solutions for network security features, including WAF, IDS, IPS, DDoS protection,
  and Economic Denial of Service/Sustainability (EDoS)

Scoring:

Domain 1: Design and Implement Hybrid IT Network Architectures at Scale 23%
Domain 2: Design and Implement AWS Networks 29%
Domain 3: Automate AWS Tasks 8%
Domain 4: Configure Network Integration with Application Services 15%
Domain 5: Design and Implement for Security and Compliance 12%
Domain 6: Manage, Optimize, and Troubleshoot the Network 13%

Exam Topics:

AWS Certified Advanced Networking – Specialty (ANS-C00)

Domain 1: Design and Implement Hybrid IT Network Architectures at Scale

1.1 Implement connectivity for hybrid IT
1.2 Given a scenario, derive an appropriate hybrid IT architecture connectivity solution
1.3 Explain the process to extend connectivity using AWS Direct Connect
1.4 Evaluate design alternatives that leverage AWS Direct Connect
1.5 Define routing policies for hybrid IT architectures

Domain 2: Design and Implement AWS Networks

2.1 Apply AWS networking concepts
2.2 Given customer requirements, define network architectures on AWS
2.3 Propose optimized designs based on the evaluation of an existing implementation
2.4 Determine network requirements for a specialized workload
2.5 Derive an appropriate architecture based on customer and application requirements
2.6 Evaluate and optimize cost allocations given a network design and application data flow

Domain 3: Automate AWS Tasks

3.1 Evaluate automation alternatives within AWS for network deployments
3.2 Evaluate tool-based alternatives within AWS for network operations and management

Domain 4: Configure Network Integration with Application Services

4.1 Leverage the capabilities of Route 53
4.2 Evaluate DNS solutions in a hybrid IT architecture
4.3 Determine the appropriate configuration of DHCP within AWS
4.4 Given a scenario, determine an appropriate load balancing strategy within the AWS
ecosystem
4.5 Determine a content distribution strategy to optimize for performance
4.6 Reconcile AWS service requirements with network requirements

Domain 5: Design and Implement for Security and Compliance

5.1 Evaluate design requirements for alignment with security and compliance objectives
5.2 Evaluate monitoring strategies in support of security and compliance objectives
5.3 Evaluate AWS security features for managing network traffic
5.4 Utilize encryption technologies to secure network communications

Domain 6: Manage, Optimize, and Troubleshoot the Network

6.1 Given a scenario, troubleshoot and resolve a network issue

Prepare for your exam:

The best way to prepare is with first-hand experience. Taking advantage of the opportunities that
Phoenix TS provides will assist you with gathering all the knowledge and skills you’ll need for
certification.

Phoenix TS AWS Certified Security – Learning Pathways