// amazon · aws-certified-security-specialty

// aws certified security - specialty

AWS-CERTIFIED-SECURITY-SPECIALTY

Master the AWS Certified Security - Specialty exam. Our prep covers IAM, encryption, and network security through realistic, scenario-based practice questions.

502

questions

in exam

170m

duration

Choose your mode

at a glance

What you get

PDF US$10.00Sub US$10/mopass 750

Free practice questions are available without payment; anyone can start practicing at no cost.

access options

PDF bank or platform subscription?

Two separate purchases: a one-time PDF for AWS Certified Security - Specialty, or a monthly subscription for online practice and simulators across the platform. A subscription does not include the PDF download.

option / 01 · pdf file

Full question bank PDF

US$10.00· one-time

Full question bank as a print-ready PDF
Lifetime access to this exam only
Domain-tagged questions with explanations
Separate from online practice — buy once

option / 02 · subscription

All exams · practice & simulator

US$10.00· per month

Practice & exam simulator on every bank
All current and future exams included
Personal analytics and retention tools
Cancel anytime — no per-exam upsells

Subscribe for platform access

sample · 1 of 502Shuffle

See what's in the bank.

Network securitymedium

3 votes · last validated recently

A company's on-premises networks are connected to VPCs using an AWS Direct Connect gateway. The company's on-premises application needs to stream data using an existing Amazon Kinesis Data Firehose delivery stream. The company's security policy requires that data be encrypted in transit using a private network.
How should the company meet these requirements?

Create a VPC endpoint for Kinesis Data Firehose. Configure the application to connect to the VPC endpoint.

100%

Configure an IAM policy to restrict access to Kinesis Data Firehose using a source IP condition. Configure the application to connect to the existing Firehose delivery stream.

Create a new TLS certificate in AWS Certificate Manager (ACM). Create a public-facing Network Load Balancer (NLB) and select the newly created TLS certificate. Configure the NLB to forward all traffic to Kinesis Data Firehose. Configure the application to connect to the NLB.

Peer the on-premises network with the Kinesis Data Firehose VPC using Direct Connect. Configure the application to connect to the existing Firehose delivery stream.

04 · coverage

Exam domains

Threat modeling and secure design30%

11 q

Identity and access management (IAM)25%

151 q

Monitoring, logging, and security analytics15%

104 q

Network security15%

121 q

Data encryption10%

115 q

community questionsview all →

Questions from the community

Top-voted approved contributions for this exam, reviewed before landing in the bank.

// top community questionsview all →

0.0 · 0 reviews

What candidates say

no reviews yet

AWS Certified Security - Specialty

Master the AWS Certified Security - Specialty exam. Our prep covers IAM, encryption, and network security through realistic, scenario-based practice questions.

// OFFICIAL EXAM LOGISTICS

source · amazon web services

// PASSING SCORE

750 / 1000· scaled

minimum to pass

75%of scale

// QUESTIONS

65official

// DURATION

170min

// EXAM FEE

300usd

// ITEM TYPES

multiple choice

multiple response

// questions

509in bank

// pass rate

92%self-reported

// last update

7h agoago

// add cadence · 12w

// downloadable pdf bank

Get the whole bank as a PDF

Every question tagged by domain, with a detailed explanation. Preview the first pages free — buy once for lifetime access to the full PDF.

509 questions

// what's inside

509 exam-style questions with verified answers
Every question tagged by domain (5 domains covered)
A detailed explanation / rationale for every question

// sample · 1 of 502

See what's in the bank.

Shuffle

#00475954-2bb1-42cd-b34f-7a8b7921888dNetwork securitymedium

↑ +47· 9 comments· seen 1,284×

Create a VPC endpoint for Kinesis Data Firehose. Configure the application to connect to the VPC endpoint.

100%

Configure an IAM policy to restrict access to Kinesis Data Firehose using a source IP condition. Configure the application to connect to the existing Firehose delivery stream.

Peer the on-premises network with the Kinesis Data Firehose VPC using Direct Connect. Configure the application to connect to the existing Firehose delivery stream.

Community converges on A. Official key confirms.

3 votes · last validated recently

// explanation

Creating a VPC endpoint for Kinesis Data Firehose allows secure, private communication over the Direct Connect gateway, meeting the requirement for encrypted in-transit data on a private network.

contributed by

@netdiver· revised by @cloud_chris

← previous

// coverage · 5 domains

What this bank tests.

amazon exam blueprint

Threat modeling and secure design11 q

30%

Identity and access management (IAM)151 q

25%

Monitoring, logging, and security analytics104 q

15%

Network security121 q

15%

Data encryption115 q

10%

// composition

By format & difficulty.

502 total

// by format

74%

26%

single · 369multi · 133

// by difficulty

easy

60· 12%

medium

374· 75%

hard

68· 14%

// contributors · 0 engineers

Built by people who took the exam.

Every question is contributed by someone who recently sat AWS Certified Security - Specialty, then reviewed by an SME before landing in the bank. These are the most prolific contributors.

view leaderboard →

No contributors for this exam yet. Be the first to contribute a question.

// own this exam?Contribute a question, earn +10 points per approval, climb the leaderboard.

// community questions

Questions from the community

Top-voted approved contributions for this exam, reviewed before landing in the bank.

// top community questionsview all →

// compare

One bank, or the whole platform?

this bank

$10.00· one-time

platform · subscribed

$10.00· per month

This bank

All other banks · 23+ exams

Lifetime access

All future updates included

Personal analytics + retention

Cancel anytime

—

// 0 reviews

0.0/ 5

No reviews yet. Be the first to share your experience with this question bank.

// faq

Things buyers ask before they buy.

open help center →

Can I practice for free?

Free practice questions are available without payment; anyone can start practicing at no cost.

What do subscribers get?

Subscribers unlock the full practice question bank for each certification exam.

How much can I see without a subscription?

Approximately 1/2 of the question bank is accessible without a subscription.

What is the passing score?

The official passing mark for this exam is 750.

How long is the certification valid?

The certification is valid for 3 years. Recertify every three years through AWS training and certification.

What experience is recommended?

Ideal for IT professionals with at least two years of experience in cloud security or equivalent hands-on experience.

// related

AWS-CERTIFIED-SECURITY-SPECIALTY

What you get

PDF bank or platform subscription?

Full question bank PDF

All exams · practice & simulator

See what's in the bank.

Exam domains

Questions from the community

What candidates say

You may also like

AWS Certified Security - Specialty

Get the whole bank as a PDF

See what's in the bank.

What this bank tests.

By format & difficulty.

Built by people who took the exam.

Questions from the community

One bank, or the whole platform?

Things buyers ask before they buy.

You may also like