Free Amazon AWS-Certified-Big-Data-Specialty Exam Braindumps (page: 20)

Which of the following must be supplied when working with the S3 REST APIs?

  1. HTTP request
  2. Signature and Time stamp
  3. Time stamp only
  4. WSDL File and Time stamp

Answer(s): B

Explanation:

When a user is trying to access the S3 bucket using REST, he is required to supply the below mentioned items in the request:
1. AWS Access Key ID – Each request must contain the Access Key ID of the identity that the user is using to send a request.
2. Signature – Each request must contain a valid request signature, or the request will be rejected. A request signature is calculated using the Secret Access key, which is a shared secret known only to the user and AWS.
3. Time stamp – Each request must contain the date and time when the request was created, represented as a string in UTC
4. Date – Each request must contain the time stamp of the request.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Which of the following are a part of the temporary security credentials that are programmatically supported by the S3 SDK for federated users?

  1. A user name with an Amazon ID only
  2. Users with an Apple ID
  3. A user name and an IAM policy describing the resource permissions to be granted
  4. An IAM policy only

Answer(s): C



Authenticating a request in Amazon S3 includes the following three steps.
1. AWS creates an HMAC-SHA1 signature.
2. AWS retrieves a secret access key.
3. AWS compares signatures.
Which of the following lists those steps in the correct order?

  1. 1, 2 and then 3
  2. 1, 3 and then 2
  3. 3, 1 and then 2
  4. 2, 1 and then 3

Answer(s): D

Explanation:

When making a REST call, Amazon S3 will receive the request. The correct sequence is given below. AWS retrieves a secret access key. AWS creates an HMAC-SHA1 signature. AWS compares signatures.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



What does the Server-side encryption provide in Amazon S3?

  1. Server-side encryption protects data at rest using Amazon S3-managed encryption keys (SSE-S3).
  2. Server-side encryption doesn't exist for Amazon S3, but only for Amazon EC2.
  3. Server-side encryption allows to upload files using an SSL endpoint for a secure transfer.
  4. Server-side encryption provides an encrypted virtual disk in the cloud.

Answer(s): A

Explanation:

Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3- managed encryption keys (SSE-S3) employs strong multi-factor encryption. Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html






Post your Comments and Discuss Amazon AWS-Certified-Big-Data-Specialty exam prep with other Community members:

AWS-Certified-Big-Data-Specialty Exam Discussions & Posts