AWS Security Specialty (SCS-C03) exam-day guide
AWS Security Specialty (SCS-C03) · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the exact ID name that matches your registration. Test centers and online proctoring typically require a valid, unexpired government photo ID with signature; some sites ask for a second form. Confirm the specific ID requirements for your appointment with the provider before test day.
Appointment confirmation and test-center address
Save the confirmation email offline and check the test center location and parking/transit the day before. Arrive early - late arrivals are commonly refused entry, but confirm the exact arrival window with the provider.
Online proctoring system test completed
If testing remotely, run the provider's system check on the same machine and network you will use, days in advance. Confirm camera, microphone, browser, and bandwidth all pass.
Clean, private room ready (online delivery)
Desk clear of paper, phones, notes, and second screens. Expect a room scan and a check of the desk surface. Exact permitted-item rules vary - confirm with the provider.
Single monitor and no secondary devices
Disconnect or remove extra monitors, and silence phones and wearables. Unapproved devices visible in the room are a common reason for session termination.
Authorization code / exam access details
For online delivery you may need an access code or launch link from the certification registration portal. Verify you can log in to both the AWS certification account and the testing vendor account the day before.
Understand the exam format: 65 questions, 170 minutes
Question types are multiple choice and multiple response. Multiple-response items state how many options to select - read that line every time.
Know the scoring model: scaled score, 750 to pass
Results are reported on a scaled range roughly 100–1000 with a passing score of 750. Unanswered items are wrong, so never leave a blank.
Flag-and-review plan rehearsed
Practice using the mark-for-review and review-screen features in a practice test so navigation does not cost you time on exam day.
Time budget in mind
170 minutes for ~65 questions works out to about 2.5 minutes per question. Aim for a first pass at roughly 90–100 minutes, leaving time to revisit flagged items.
Water and a restroom stop beforehand
Scheduled breaks are generally not offered on this exam and leaving the room during online delivery can end your session. Confirm the break policy with the provider.
Backup plan for connectivity failure
Know the vendor's support number and reconnect procedure if a remote session drops. Have a phone available as a fallback contact, kept out of the testing area until needed.
Plan the day
Stop adding new material. Review the six domains' weightings and your weakest two areas, and re-read your own notes on IAM policy evaluation logic, KMS key policies vs. IAM policies, and cross-account access.
Take one full-length timed practice set under exam conditions. Spend more time reviewing the explanations than taking the test.
Rehearse the high-yield scenarios out loud: SCP vs. permission boundary vs. identity policy; VPC endpoint policies vs. security groups; CloudTrail vs. GuardDuty vs. Security Hub vs. Macie vs. Inspector; S3 Block Public Access layers.
Confirm logistics: appointment time, delivery mode, ID documents, and - for remote delivery - run the system test again on the final machine.
Do a light pass only: skim your one-page cheat sheet of service-to-use-case mappings. No new topics.
Prepare the physical setup: lay out ID, printed confirmation, and any permitted items. Clear the desk and the room if testing remotely.
Get a full night's sleep. Cramming past midnight reliably costs more points than it earns.
Eat and hydrate normally. Avoid heavy caffeine if you are not habituated to it.
Arrive at the test center well before your slot, or log in early for remote delivery so the identity check and room scan do not eat into exam time.
Read the final sentence of the question first to identify the ask, then scan the scenario for constraints like 'most cost-effective', 'least operational overhead', 'least privilege', or 'within the same Region'.
Answer everything you can quickly, flag anything requiring long reasoning, and move on. Never leave an item blank.
Return to flagged items with fresh eyes. Eliminate two options, then choose between the survivors on the stated constraint, not on which service you like.
Use the review screen to confirm no item is unanswered, then submit. Do not change answers on instinct alone - change only when you find a concrete reason.
Rules to check
Bring valid government-issued photo ID matching your registration name exactly. If your ID name differs, resolve it with the provider before test day - do not expect an on-site fix.
Do not bring notes, phones, smart watches, or any study material into the testing area. For remote delivery, unapproved items on camera are grounds for session termination; confirm the permitted-item list with the provider.
Stay in the camera's view and in the room for the duration of a remotely proctored exam. Leaving the camera view or the room during the session can void your result - confirm the exact policy with the provider.
Do not attempt to photograph, copy, or reconstruct exam questions afterward. The exam content is confidential and the certification agreement prohibits disclosure.
Scoring is on a scaled range with a passing score of 750, and every unanswered question counts as incorrect - always submit an answer for every item, even a best guess.
Your result is typically shown on screen at the end of the exam and confirmed in your AWS certification account shortly after; if a technical failure occurs, contact the testing vendor immediately rather than rebooking.
If you fail, check the score report's domain-level breakdown to target your retake, and confirm the waiting period and retake fee with the provider before scheduling.
Any accommodation request - extra time, separate room, screen reader - must be arranged with the provider in advance, not on exam day.