What does the Server-side encryption provide in Amazon S3?
Answer(s): A
Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3- managed encryption keys (SSE-S3) employs strong multi-factor encryption. Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates.
http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
A user is creating an S3 bucket policy. Which of the below mentioned elements the user will not include as part of it?
Answer(s): B
When creating an S3 bucket policy, the user needs to define the resource (which will have the bucket or the object), actions, effect and principal.They are explained below:Resources – Buckets and objects are the Amazon S3 resources for which user can allow or deny permissions.Actions – For each resource, Amazon S3 supports a set of operations. user identifies resource operations which will allow (or deny) by using action keywordsEffect – What the effect will be when the user requests the specific action—this can be either allow or deny.Principal – The account or user who is allowed access to the actions and resources in the statement. You specify principal only in a bucket policy. It is the user, account, service, or other entity who is the recipient of this permission. In a user policy, the user to which the policy is attached is the implicit principal.
http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-languageoverview.html
An IAM user is performing an operation on another account's S3 bucket. What will S3 first check in this context?
You can use in an Amazon S3 bucket policy for cross-account access, which means an AWS account can access resources in another AWS account.
Answer(s): D
You can use canonical user IDs in an Amazon S3 bucket policy for cross-account access, which means an AWS account can access resources in another AWS account. For example, to grant another AWS account access to your bucket, you specify the account's canonical user ID in the bucket's policy.
http://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html
A root account owner is trying to understand the S3 bucket ACL. Which choice below is a not a predefined group which can be granted object access via ACL?
An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups. Amazon S3 has a set of predefined groups. When granting account access to a group, the user can specify one of the URLs of that group instead of a canonical user ID. Amazon S3 has the following predefined groups:. Authenticated Users group: It represents all AWS accounts.. All Users group: Access permission to this group allows anyone to access the resource.. Log Delivery group: WRITE permission on a bucket enables this group to write server access logs to the bucket.
http://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html
Share your comments for Amazon AWS-Certified-Big-Data-Specialty exam with other users:
i will wait impatiently. thank youu
is it possible to clear the exam if we focus on only these 156 questions instead of 623 questions? kindly help!
really helped with preparation of my scrum exam
very informative and through explanations
prep for exam
thanks for helping us
i prepared for the eccouncil 350-401 exam. i scored 92% on the test.
aba questions to practice
great content
how do i get the remaining questions?
well formatted pdf and the test engine software is free. well worth the money i sept.
looking for 1z0-116
in question 22, shouldnt be in the data (option a) layer?
the questions are incredibly close to real exam. you people are amazing.
q15. answer is b. simple
great practice
thanks to this exam dumps, i felt confident and passed my exam with ease.
need 1z0-1105-22 exam
this is a beautiful tool. passed after a week of studying.
can you please upload the dumps for 1z0-1096-23 for oracle
its intresting, i would like to learn more abouth this
q252: dns poisoning is the correct answer, not locator redirection. beaconing is detected from a host. this indicates that the system has been infected with malware, which could be the source of local dns poisoning. location redirection works by either embedding the redirection in the original websites code or having a user click on a url that has an embedded redirect. since users at a different office are not getting redirected, it isnt an embedded redirection on the original website and since the user is manually typing in the url and not clicking a link, it isnt a modified link.
helpful dump questions
question 423 eigrp uses metric
hello nice dumps
good resource for learning
very useful
physical tempering techniques
its giving best technical knowledge
please upload
great question with explanation thanks!!
does this exam have lab sections?
please upload the braindump for .net