Penetration Testing in Cloud CCSE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A cloud security engineer is explaining to management why a penetration test of their public cloud environment is different from a traditional on-premises test. Which statement is most accurate?

   • ACloud penetration testing must consider the shared responsibility model, provider authorization, and the ephemeral nature of cloud resources.
   • BCloud penetration testing is easier because the provider handles all security controls.
   • CCloud penetration testing does not require authorization because the provider owns the infrastructure.
   • DCloud penetration testing is identical to on-premises testing because the same tools and techniques apply.
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A penetration tester is using the OWASP Testing Guide to assess a cloud-based web application. The tester has completed the configuration and deployment management testing phase and found that the application exposes sensitive error messages that reveal internal paths and database details. According to OWASP, what is the most appropriate next step in the testing process?

   • ARetest the error messages after modifying the application code to ensure they are sanitized.
   • BDocument the finding and recommend that the application sanitize error messages to prevent information disclosure.
   • CProceed to test for authentication flaws, since information disclosure is a low-risk issue.
   • DExploit the error messages to extract database credentials and gain unauthorized access.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A company is planning to migrate its on-premises applications to a public cloud PaaS environment. The security team wants to understand how penetration testing will change. Which statement is most accurate?

   • ATesting will be identical to on-premises testing because the application code is the same.
   • BTesting will be more comprehensive because the customer can test the underlying operating system and network.
   • CTesting will require no authorization because the provider is responsible for security.
   • DTesting will focus on the application and its configuration, while the underlying platform is managed by the provider and is out of scope.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A penetration tester is assessing a cloud application that uses an API gateway. The tester wants to test for insecure API endpoints. Which technique is most effective?

   • AUse a web vulnerability scanner to scan the entire cloud provider's IP range.
   • BAttempt to access the API gateway's underlying database directly.
   • CPerform a network scan of the API gateway's IP address to find open ports.
   • DUse an API testing tool to fuzz the endpoints with unexpected inputs and check for error messages or unexpected behavior.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   During a cloud penetration test, a tester discovers a container running in a Kubernetes cluster that has a known critical vulnerability. The tester wants to determine whether the vulnerability can be exploited to access other containers or the host. Which technique is most appropriate for this phase?

   • ACheck the container's image registry for other vulnerable images and test those instead.
   • BRun a network scan from the container to identify all other containers and then stop testing.
   • CImmediately report the vulnerability to the client without further testing to avoid disrupting the environment.
   • DAttempt to exploit the vulnerability and then use container escape techniques to gain access to the host or other containers.
   Reveal Solution Discussion Select an answer first