Which security control can prevent an attacker from using SSRF to access the metadata service from an application?

Encrypting all data in transit with TLS

Implementing a web application firewall (WAF)

Using a VPN to connect to the cloud environment

Validating and sanitizing user-supplied URLs in the application

What is the primary purpose of using a privileged container in the context of container escape?

To enable the container to use the host's GPU for accelerated computing

To limit the container's network access to the host only

To grant the container all capabilities and access to host devices

To run containers with a read-only root filesystem

What is a common security measure to protect the cloud metadata service from SSRF attacks?

Moving the metadata service to a different IP address

Using IMDSv2, which requires session tokens

Blocking all outbound traffic from the instance

Restricting the metadata service to only respond to requests from the instance's own network interface

Which IAM policy configuration is recommended to minimize the risk of unauthorized access?

Granting permissions based on the principle of least privilege

Attaching the `AdministratorAccess` policy to all users

Using a single IAM user for all administrators

Allowing IAM users to create their own policies

CompTIAPenTest+

Domain 4Objective 5

Cloud-Based Attacks PT0-003 Practice Questions (Page 2)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

6concepts

35%of the exam

Questions 6–10

6foundation · easy
In a cloud environment, what is the typical network address of the instance metadata service (IMDS) that an attacker might target?
Select an answer first
7foundation · easy
Which security control can prevent an attacker from using SSRF to access the metadata service from an application?
Select an answer first
8foundation · easy
What is the primary purpose of using a privileged container in the context of container escape?
Select an answer first
9foundation · easy
What is a common security measure to protect the cloud metadata service from SSRF attacks?
Select an answer first
10foundation · easy
Which IAM policy configuration is recommended to minimize the risk of unauthorized access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.