Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Amazon
  5. BDS-C00

Amazon BDS-C00 Exam
AWS Certified Big Data -Speciality (Page 16 )

Updated On: 9-Feb-2026
Page 16 of 100
PDF with 492 Questions

Is it required to send both the Access Key and the Secret Access key in the REST request to Amazon S3?

  1. Yes
  2. Yes, it is required only for the IAM users.
  3. No
  4. Yes, it is required only for the root accounts.

Answer(s): C

Explanation:

No, it is not required to send both the Access key and the Secret Access key. When a user is making a REST URL, the user is required to send only the Access key and a signature. The signature is created with the Secret Access key and request contents. The user does not need to explicitly send the Secret Access key. Amazon S3 uses the access key ID to look up your secret access key.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Can temporary security credential validity be specified by a user when it has been created using S3 SDK?

  1. Yes
  2. Yes, this is possible but only when generating credentials for an IAM user.
  3. Yes, this is possible but only when generating credentials for a root account user.
  4. No

Answer(s): B

Explanation:

An IAM user or an AWS Account can request temporary security credentials using AWS SDK for Java and use them to access Amazon S3. These credentials expire after the session duration. By default, the session duration is one hour. If you use IAM user credentials, you can specify duration, between 1 and 36 hours, when requesting the temporary security credentials.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/AuthUsingTempSessionTokenJava.html



Which of the following must be supplied when working with the S3 REST APIs?

  1. HTTP request
  2. Signature and Time stamp
  3. Time stamp only
  4. WSDL File and Time stamp

Answer(s): B

Explanation:

When a user is trying to access the S3 bucket using REST, he is required to supply the below mentioned items in the request:
1. AWS Access Key ID – Each request must contain the Access Key ID of the identity that the user is using to send a request.
2. Signature – Each request must contain a valid request signature, or the request will be rejected. A request signature is calculated using the Secret Access key, which is a shared secret known only to the user and AWS.
3. Time stamp – Each request must contain the date and time when the request was created, represented as a string in UTC
4. Date – Each request must contain the time stamp of the request.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Which of the following are a part of the temporary security credentials that are programmatically supported by the S3 SDK for federated users?

  1. A user name with an Amazon ID only
  2. Users with an Apple ID
  3. A user name and an IAM policy describing the resource permissions to be granted
  4. An IAM policy only

Answer(s): C



Authenticating a request in Amazon S3 includes the following three steps.
1. AWS creates an HMAC-SHA1 signature.
2. AWS retrieves a secret access key.
3. AWS compares signatures.
Which of the following lists those steps in the correct order?

  1. 1, 2 and then 3
  2. 1, 3 and then 2
  3. 3, 1 and then 2
  4. 2, 1 and then 3

Answer(s): D

Explanation:

When making a REST call, Amazon S3 will receive the request. The correct sequence is given below. AWS retrieves a secret access key. AWS creates an HMAC-SHA1 signature. AWS compares signatures.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html






Post your Comments and Discuss Amazon BDS-C00 exam prep with other Community members:

Join the BDS-C00 Discussion