Penetration Testing in Cloud CCSE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A penetration tester is assessing the security of a cloud-based API. The tester wants to identify vulnerabilities such as broken object-level authorization and excessive data exposure. Which tool or technique is most appropriate for this task?

   • AUse an API testing tool like Postman or Burp Suite to manually craft requests and test for authorization flaws.
   • BPerform a network port scan of the API server to identify open ports.
   • CRun a vulnerability scanner like Nessus against the API endpoint.
   • DReview the API documentation and manually test each endpoint without any tools.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   During a cloud penetration test, a tester discovers that an AWS S3 bucket is publicly readable and contains backup files with database credentials. The tester wants to demonstrate the impact without exfiltrating data. Which technique is most appropriate?

   • AUse the cloud provider's access logging to show that the bucket is publicly accessible and document the risk with a screenshot of the bucket listing.
   • BAttempt to access the database using the credentials and show that you can log in, then stop.
   • CDelete the backup files to prevent further exposure and then report the misconfiguration.
   • DDownload a small sample of the backup files to prove the credentials are real and include them in the report.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   After a cloud penetration test, a tester is preparing the final report. The tester found a critical vulnerability in a cloud storage bucket that allows public read access to sensitive data. The client wants to know the business impact and remediation steps. What is the most effective way to present this finding in the report?

   • ARecommend immediate deletion of the bucket to eliminate the risk.
   • BInclude a detailed description of the vulnerability, the data exposed, the potential business impact, and step-by-step remediation instructions.
   • CProvide only the technical details of the vulnerability and the affected bucket name.
   • DList the vulnerability as a low-risk finding because the data is not encrypted.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   After a cloud penetration test, the tester needs to write a report that includes a critical finding about a misconfigured identity provider. What is the most important element to include in the report?

   • AThe exact commands used during the test to allow the client to reproduce the issue.
   • BA clear description of the vulnerability, evidence of exploitation, and a prioritized remediation plan.
   • CThe names of the testers and their qualifications to establish credibility.
   • DA list of all tools used during the test to show the thoroughness of the assessment.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A penetration tester is assessing a Kubernetes cluster running in a public cloud. The tester has access to a pod and wants to test for container escape vulnerabilities. Which technique is most appropriate?

   • ARun a network scan from the pod to the host's cloud metadata service.
   • BCheck the pod's security context and capabilities, then attempt to exploit any misconfigurations such as privileged mode or hostPID.
   • CUse a tool like Nmap to scan all pods in the cluster for open ports.
   • DAttempt to mount the host filesystem by using the docker socket if available.
   Reveal Solution Discussion Select an answer first