Penetration Testing in Cloud CCSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration tester is following the PTES methodology for a cloud-based application. During the intelligence gathering phase, the tester identifies a public cloud storage bucket that appears to belong to the target. What is the most appropriate next step according to PTES?

   • AAttempt to list the contents of the bucket to confirm ownership and gather information.
   • BReport the bucket to the client as a confirmed vulnerability without further testing.
   • CRun a full vulnerability scan against the bucket's IP address.
   • DImmediately attempt to upload a test file to the bucket to test write permissions.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   During a cloud penetration test, a tester finds that a cloud storage bucket allows public write access. The tester has authorization to test the environment. What is the most appropriate action to demonstrate the risk without causing damage?

   • AUpload a harmless test file with a unique name and then delete it, documenting the action in the report.
   • BDo not test the write access and only report the configuration as a potential risk.
   • CUpload a file containing a proof-of-concept script that could be used to gain further access.
   • DModify an existing file in the bucket to show that write access is possible.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security consultant is hired to test a SaaS application that runs on a public cloud. The contract specifies that the consultant must not perform any testing that could affect other tenants. Which testing activity is most appropriate under this constraint?

   • AUse a cloud-based scanner to enumerate all resources in the shared resource group.
   • BAttempt to access other tenants' data by manipulating the tenant ID in API requests.
   • CPerform API-level testing against the application's documented endpoints using the tenant's own credentials.
   • DRun a full network vulnerability scan against the underlying cloud infrastructure IP ranges.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key element of a cloud penetration testing report?

   • AA clear summary of findings, including risk ratings and remediation recommendations
   • BThe names of all employees involved in the test
   • CA detailed description of the testing tools used
   • DA list of all passwords discovered during the test
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company uses a hybrid cloud: a private OpenStack environment for sensitive data and a public AWS account for web applications. The security team wants to run an external penetration test against the public-facing web app and an internal test against the private cloud. Which action must the team take before starting either test?

   • AOnly notify the internal IT team, because private cloud testing is fully within corporate control and public cloud testing is allowed by default.
   • BObtain written authorization from AWS and from the internal OpenStack administrator, and verify the test scope with the cloud provider's penetration testing policy.
   • CPurchase a dedicated penetration testing insurance policy to cover any legal liability from testing both environments.
   • DRequest a formal change request from the change advisory board for the private cloud, and skip public cloud authorization because the web app is already internet-facing.
   Reveal Solution Discussion Select an answer first