Cloud-Based Attacks PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of using IAM roles instead of long-term access keys for applications running on cloud instances?

   • ATo provide temporary credentials that are automatically rotated
   • BTo store access keys in the application code
   • CTo bypass the need for authentication
   • DTo allow multiple users to share the same access key
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst is reviewing IAM policies in AWS. They find a policy that allows a user to list all S3 buckets but not read or write objects. What is the most likely risk associated with this policy?

   • AThe user can enumerate all bucket names in the account.
   • BThe user can delete S3 buckets.
   • CThe user can modify bucket policies.
   • DThe user can read objects from all buckets.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A DevOps team is deploying containers to a Kubernetes cluster. They want to reduce the risk of container escape attacks. Which configuration should they implement?

   • ARun containers with the --privileged flag to ensure they have all necessary capabilities.
   • BUse a read-only root filesystem and drop all Linux capabilities.
   • CMount the host's /var/run/docker.sock into the container for easier management.
   • DDisable SELinux/AppArmor to improve container performance.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which technique is commonly used to escape a containerized environment by exploiting a misconfigured capability that allows the container process to interact with the host kernel?

   • AUsing a malicious container image
   • BAbusing the container runtime socket
   • CExploiting a kernel vulnerability
   • DLeveraging a misconfigured Linux capability
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A penetration tester is assessing a containerized application. The tester finds that the container has the CAP_SYS_ADMIN capability and is running as root. Which technique is most likely to achieve a container escape?

   • AUse a kernel exploit targeting a known vulnerability in the host kernel.
   • BRead environment variables from the container to find host credentials.
   • CPerform a denial-of-service attack on the container to force a restart.
   • DMount the host filesystem using a cgroup release_agent or similar technique.
   Reveal Solution Discussion Select an answer first