Which technique is commonly used for lateral movement in a cloud environment?

Using compromised credentials to access other cloud services

Encrypting data in storage buckets

Performing a DDoS attack on the cloud provider

An attacker has compromised an AWS account and wants to avoid detection by the organization's security monitoring. The attacker has administrative privileges. Which action is most effective for evading cloud logging and monitoring?

Encrypt all data before exfiltration.

Use a VPN to hide the source IP address.

Disable CloudTrail and delete existing trail logs.

Create a new IAM user and use it for all subsequent actions.

What is the goal of enumerating cloud APIs during the service enumeration phase?

To identify API endpoints and their authentication requirements

To discover the physical location of cloud data centers

To determine the cloud provider's internal network architecture

To obtain the cloud provider's source code

An attacker has compromised an AWS account and wants to establish persistence that is difficult to detect. The attacker has administrative privileges. Which persistence mechanism is most stealthy?

Add the attacker's SSH public key to the EC2 instance's authorized_keys file.

Create a new IAM user with a name similar to an existing user and attach a policy that allows assume-role.

Modify the IAM policy of an existing user to grant admin access.

Create a new CloudFormation stack that recreates the attacker's resources if they are deleted.

EC-CouncilCertified Ethical Hacker

Domain 8Objective 3

Cloud Hacking Methodology CEH Practice Questions (Page 1)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

10concepts

Questions 1–5

1foundation · easy
Which technique is commonly used for lateral movement in a cloud environment?
Select an answer first
2application · medium
An attacker has compromised an AWS account and wants to avoid detection by the organization's security monitoring. The attacker has administrative privileges. Which action is most effective for evading cloud logging and monitoring?
Select an answer first
3foundation · easy
What is the goal of enumerating cloud APIs during the service enumeration phase?
Select an answer first
4foundation · easy
Which cloud service enumeration activity involves listing accessible storage buckets and checking their permissions?
Select an answer first
5expert · hard
An attacker has compromised an AWS account and wants to establish persistence that is difficult to detect. The attacker has administrative privileges. Which persistence mechanism is most stealthy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.