Penetration Testing in Cloud CCSE Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A penetration tester is hired to test a public cloud environment that is part of a hybrid deployment. The tester has received written authorization from the client, but the client's cloud provider has a policy that requires pre-approval for certain types of tests. What should the tester do?

   • AAsk the client to sign a waiver releasing the tester from any provider policy violations.
   • BLimit the test to the private cloud portion to avoid provider policy issues.
   • CReview the provider's testing policy and obtain any required pre-approval before starting the test.
   • DProceed with the test because the client's authorization is sufficient.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   During a cloud penetration test, a tester discovers that a cloud function (serverless) has an overly permissive IAM role that allows it to invoke other functions and read from a database. The tester has authorization to test the environment. What is the most effective way to demonstrate the impact of this misconfiguration?

   • AReport the IAM role as a high-risk finding without further testing to avoid potential data exposure.
   • BInvoke the function with a crafted payload to trigger the IAM role and attempt to read sensitive data from the database.
   • CAttempt to assume the IAM role directly from the tester's own account to show the role is overly permissive.
   • DDelete the function and recreate it with a least-privilege role to show the remediation.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is a common cloud-specific attack vector?

   • ACross-site scripting (XSS) in a web page
   • BMisconfigured cloud storage buckets
   • CSQL injection in a web application
   • DBuffer overflow in a network service
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is a common attack vector related to identity and access management (IAM) in the cloud?

   • AInsecure network protocols like HTTP
   • BWeak encryption algorithms used for data at rest
   • CExcessive permissions granted to users or roles
   • DUnpatched operating systems on virtual machines
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   During the exploitation phase of a cloud penetration test, a tester successfully compromises an IAM user's access keys. What is the most appropriate post-exploitation action to demonstrate impact without causing damage?

   • AEnumerate the permissions of the compromised IAM user to determine the potential impact.
   • BUse the keys to access the cloud management console and take a screenshot.
   • CCreate a new IAM user with administrative privileges to prove persistent access.
   • DDelete critical resources to show the impact of the compromised keys.
   Reveal Solution Discussion Select an answer first