Amazon BDS-C00 Exam (page: 15)
Amazon AWS Certified Big Data -Speciality
Updated on: 15-Feb-2026

Viewing Page 15 of 100

Is it required to send both the Access Key and the Secret Access key in the REST request to Amazon S3?

  1. Yes
  2. Yes, it is required only for the IAM users.
  3. No
  4. Yes, it is required only for the root accounts.

Answer(s): C

Explanation:

No, it is not required to send both the Access key and the Secret Access key. When a user is making a REST URL, the user is required to send only the Access key and a signature. The signature is created with the Secret Access key and request contents. The user does not need to explicitly send the Secret Access key. Amazon S3 uses the access key ID to look up your secret access key.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Can temporary security credential validity be specified by a user when it has been created using S3 SDK?

  1. Yes
  2. Yes, this is possible but only when generating credentials for an IAM user.
  3. Yes, this is possible but only when generating credentials for a root account user.
  4. No

Answer(s): B

Explanation:

An IAM user or an AWS Account can request temporary security credentials using AWS SDK for Java and use them to access Amazon S3. These credentials expire after the session duration. By default, the session duration is one hour. If you use IAM user credentials, you can specify duration, between 1 and 36 hours, when requesting the temporary security credentials.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/AuthUsingTempSessionTokenJava.html



Which of the following must be supplied when working with the S3 REST APIs?

  1. HTTP request
  2. Signature and Time stamp
  3. Time stamp only
  4. WSDL File and Time stamp

Answer(s): B

Explanation:

When a user is trying to access the S3 bucket using REST, he is required to supply the below mentioned items in the request:
1. AWS Access Key ID – Each request must contain the Access Key ID of the identity that the user is using to send a request.
2. Signature – Each request must contain a valid request signature, or the request will be rejected. A request signature is calculated using the Secret Access key, which is a shared secret known only to the user and AWS.
3. Time stamp – Each request must contain the date and time when the request was created, represented as a string in UTC
4. Date – Each request must contain the time stamp of the request.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Which of the following are a part of the temporary security credentials that are programmatically supported by the S3 SDK for federated users?

  1. A user name with an Amazon ID only
  2. Users with an Apple ID
  3. A user name and an IAM policy describing the resource permissions to be granted
  4. An IAM policy only

Answer(s): C



Authenticating a request in Amazon S3 includes the following three steps.
1. AWS creates an HMAC-SHA1 signature.
2. AWS retrieves a secret access key.
3. AWS compares signatures.
Which of the following lists those steps in the correct order?

  1. 1, 2 and then 3
  2. 1, 3 and then 2
  3. 3, 1 and then 2
  4. 2, 1 and then 3

Answer(s): D

Explanation:

When making a REST call, Amazon S3 will receive the request. The correct sequence is given below. AWS retrieves a secret access key. AWS creates an HMAC-SHA1 signature. AWS compares signatures.


Reference:

http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_Authentication2.html



Viewing Page 15 of 100



Share your comments for Amazon BDS-C00 exam with other users:

Andy 12/26/2023 9:35:00 PM

plan to take theaws certified developer - associate dva-c02 in the next few weeks
SINGAPORE


siva 5/17/2023 12:32:00 AM

very helpfull
Anonymous


mouna 9/27/2023 8:53:00 AM

good questions
Anonymous


Bhavya 9/12/2023 7:18:00 AM

help to practice csa exam
Anonymous


Malik 9/28/2023 1:09:00 PM

nice tip and well documented
Anonymous


rodrigo 6/22/2023 7:55:00 AM

i need the exam
Anonymous


Dan 6/29/2023 1:53:00 PM

please upload
Anonymous


Ale M 11/22/2023 6:38:00 PM

prepping for fsc exam
AUSTRALIA


ahmad hassan 9/6/2023 3:26:00 AM

pd1 with great experience
Anonymous


Žarko 9/5/2023 3:35:00 AM

@t it seems like azure service bus message quesues could be the best solution
UNITED KINGDOM


Shiji 10/15/2023 1:08:00 PM

helpful to check your understanding.
INDIA


Da Costa 8/27/2023 11:43:00 AM

question 128 the answer should be static not auto
Anonymous


bot 7/26/2023 6:45:00 PM

more comments here
UNITED STATES


Kaleemullah 12/31/2023 1:35:00 AM

great support to appear for exams
Anonymous


Bsmaind 8/20/2023 9:26:00 AM

useful dumps
Anonymous


Blessious Phiri 8/13/2023 8:37:00 AM

making progress
Anonymous


Nabla 9/17/2023 10:20:00 AM

q31 answer should be d i think
FRANCE


vladputin 7/20/2023 5:00:00 AM

is this real?
UNITED STATES


Nick W 9/29/2023 7:32:00 AM

q10: c and f are also true. q11: this is outdated. you no longer need ownership on a pipe to operate it
Anonymous


Naveed 8/28/2023 2:48:00 AM

good questions with simple explanation
UNITED STATES


cert 9/24/2023 4:53:00 PM

admin guide (windows) respond to malicious causality chains. when the cortex xdr agent identifies a remote network connection that attempts to perform malicious activity—such as encrypting endpoint files—the agent can automatically block the ip address to close all existing communication and block new connections from this ip address to the endpoint. when cortex xdrblocks an ip address per endpoint, that address remains blocked throughout all agent profiles and policies, including any host-firewall policy rules. you can view the list of all blocked ip addresses per endpoint from the action center, as well as unblock them to re-enable communication as appropriate. this module is supported with cortex xdr agent 7.3.0 and later. select the action mode to take when the cortex xdr agent detects remote malicious causality chains: enabled (default)—terminate connection and block ip address of the remote connection. disabled—do not block remote ip addresses. to allow specific and known s
Anonymous


Yves 8/29/2023 8:46:00 PM

very inciting
Anonymous


Miguel 10/16/2023 11:18:00 AM

question 5, it seems a instead of d, because: - care plan = case - patient = person account - product = product2;
SPAIN


Byset 9/25/2023 12:49:00 AM

it look like real one
Anonymous


Debabrata Das 8/28/2023 8:42:00 AM

i am taking oracle fcc certification test next two days, pls share question dumps
Anonymous


nITA KALE 8/22/2023 1:57:00 AM

i need dumps
Anonymous


CV 9/9/2023 1:54:00 PM

its time to comptia sec+
GREECE


SkepticReader 8/1/2023 8:51:00 AM

question 35 has an answer for a different question. i believe the answer is "a" because it shut off the firewall. "0" in registry data means that its false (aka off).
UNITED STATES


Nabin 10/16/2023 4:58:00 AM

helpful content
MALAYSIA


Blessious Phiri 8/15/2023 3:19:00 PM

oracle 19c is complex db
Anonymous


Sreenivas 10/24/2023 12:59:00 AM

helpful for practice
Anonymous


Liz 9/11/2022 11:27:00 PM

support team is fast and deeply knowledgeable. i appreciate that a lot.
UNITED STATES


Namrata 7/15/2023 2:22:00 AM

helpful questions
Anonymous


lipsa 11/8/2023 12:54:00 PM

thanks for question
Anonymous