SCS-C03 deep review — September 28, 2026

Read the complete guide, all 70 skills across 16 tasks, root, comparison appendix, revision history, root-linked service list and credential page. Broad objectives match the accepted baseline. Version 1.0 is listed as March 26, 2026. Add the previously missing retirement of Simplified Chinese, Spanish (Latin America) and Portuguese (Brazil) delivery after December 31, 2026; preserve the overall active exam.

Learning improvements

Repair the empty service-list link using the root's actual C03-namespace URL, whose filename retains scs-02. Clarify same-account IAM session-principal grants, RCP coverage, Verified Permissions, CORS, tracked connections during quarantine and imported multi-Region KMS rotation/recovery. Add GuardDuty dry-run/live behavior, redacted-field limitations and AI Protection prerequisites. Record CodeGuru Security end of support and CloudTrail Lake/Audit Manager eligibility limits.

Answer all 42 existing original knowledge checks. Five new worked decisions cover IAM interpretation, response timing, evidence hashing, rule-match interpretation and encrypted-evidence recovery. Eight local arithmetic/hash assertions passed; eight cloud labs remain proposed.

Reading and unresolved evidence

The April 8 forensic collection article contributes protected storage and temporary case-scoped collection concepts, with custody and KMS/Bucket Key caveats. The June 24 sign-in article contributes explicit enforcement activation, break-glass and allowed/denied verification. Neither implementation was executed.

Detailed exam scope lists ordering/matching as well as choice/response; the credential overview mentions only choice/response. Preserve the discrepancy as blocked and teach from the fuller published scope. No unsupported delivery prediction was added.

Pluralsight confirms 2h16m Detection updated July 15. Dojo sampler and Whizlabs public project metadata were inspected; Dojo's path still links older compliance material. Udemy was blocked, and the official practice URL returned a Skill Builder shell. No paid lessons, AWS account, policy simulation, attack, forensic acquisition or cloud lab was used. Human review remains pending.

The operational receipt records objective hashes/mappings, sources and validation. Accepted snapshots remain unchanged.