Penetration Testing in Cloud CCSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When recommending remediation for a misconfigured cloud storage bucket, what is the most appropriate action?

   • AEncrypt the bucket with a stronger encryption algorithm
   • BApply the principle of least privilege to the bucket's access policies
   • CMove the bucket to a different region
   • DDelete the bucket and recreate it with a different name
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A penetration tester is performing reconnaissance on a target cloud environment. The tester finds a public GitHub repository that contains a configuration file with hardcoded cloud API keys. What is the most appropriate next step?

   • AUse the keys to access the cloud environment and list all resources.
   • BValidate the keys against the cloud provider's API to confirm they are active and document the exposure.
   • CDelete the GitHub repository to prevent further exposure.
   • DImmediately notify the client about the exposed keys without further testing.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   During a cloud penetration test, a tester discovers that a Kubernetes cluster has a misconfigured Role-Based Access Control (RBAC) that allows a service account to create pods in the kube-system namespace. The tester wants to demonstrate the impact without causing damage. Which action is most appropriate?

   • ACreate a harmless test pod in the kube-system namespace and then delete it, documenting the ability to create resources.
   • BDelete an existing pod in the kube-system namespace to show the ability to disrupt the cluster.
   • CCreate a privileged pod that mounts the host filesystem to show full node compromise.
   • DModify the RBAC policy to grant the service account cluster-admin privileges.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A penetration tester is assessing a Kubernetes cluster. The tester has identified that the cluster's dashboard is exposed to the internet without authentication. The tester wants to demonstrate the impact of this misconfiguration. Which technique is most appropriate?

   • AAttempt to access the dashboard's API using default credentials.
   • BReport the exposed dashboard as a high-risk finding without accessing it to avoid any potential damage.
   • CAccess the dashboard and attempt to create a pod that mounts the host's filesystem to gain access to the node.
   • DRun a network scan from the dashboard to identify other services in the cluster.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security team is conducting a penetration test of a serverless application on AWS Lambda. The application uses API Gateway and DynamoDB. The team wants to test for common cloud-specific vulnerabilities. Which testing approach is most effective?

   • AAttempt to access the DynamoDB table directly using the AWS CLI without credentials.
   • BUse a container scanning tool to scan the Lambda deployment package for vulnerabilities.
   • CPerform a network vulnerability scan of the Lambda function's underlying servers.
   • DTest the API Gateway endpoints for injection and broken authentication, and review the Lambda function's IAM role for excessive permissions.
   Reveal Solution Discussion Select an answer first