Cloud Hacking Methodology CEH Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team suspects that an attacker has compromised a cloud account by stealing a user's OAuth token. The attacker used the token to access cloud resources and then created a new service principal with elevated privileges. Which phase of the cloud hacking methodology does the creation of the service principal represent?

   • ALateral movement
   • BPrivilege escalation
   • CPersistence mechanism
   • DCredential attack
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst is performing cloud reconnaissance against a target organization. The analyst discovers a publicly accessible Azure Blob storage container that lists the organization's internal project names. Which technique was used to discover this information?

   • ASearching for public storage containers using the cloud provider's API.
   • BPhishing an employee to obtain the storage account URL.
   • CExploiting a vulnerability in the Azure portal.
   • DBrute-forcing the storage account keys.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security auditor is reviewing a client's Azure environment and finds a Storage Account with a container that has 'Container access level' set to 'Public blob'. The auditor also notes that the storage account's firewall is configured to 'Enabled from selected networks' but the 'Allow trusted Microsoft services' exception is checked. Which action represents the MOST direct exploitation of this misconfiguration?

   • ACreating a new container in the storage account.
   • BUsing Azure CLI to list the storage account keys.
   • CUploading a malicious blob to the container to test for stored XSS.
   • DAccessing the container's blobs directly via the public endpoint URL.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester has compromised an Azure VM and obtained the managed identity credentials. The tester wants to escalate privileges to the subscription level. Which technique is most appropriate?

   • AUse the managed identity token to call Azure Resource Manager APIs and attempt to assign the 'Contributor' role to the identity.
   • BBrute-force the subscription admin password from the VM.
   • CModify the VM's network security group to allow inbound RDP from anywhere.
   • DDisable Azure Defender for the subscription.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   During a cloud security assessment, a tester finds that an Azure Storage account has a container with 'Blob' anonymous read access enabled. The tester also notices that the storage account's shared access signature (SAS) token is embedded in a public GitHub repository. Which action should the tester take to demonstrate the most critical risk?

   • ADelete the SAS token from the GitHub repository to remediate the exposure.
   • BDisable anonymous access on the container to prevent further exposure.
   • CAttempt to list all storage accounts in the subscription using the SAS token.
   • DDownload all blobs from the container to prove data exposure.
   Reveal Solution Discussion Select an answer first