A security engineer is reviewing a suspicious data exfiltration incident. The attacker used a legitimate cloud API to copy sensitive data from an S3 bucket to an external storage service. The activity was not detected by the organization's monitoring tools because the API calls were made using a compromised IAM user with legitimate permissions. Which technique did the attacker use?

Abusing the cloud API with legitimate credentials to exfiltrate data.

Using a covert channel to hide the data transfer.

Exploiting a misconfigured S3 bucket with public read access.

Disabling CloudTrail to prevent logging of the API calls.

EC-CouncilCertified Ethical Hacker

Domain 8Objective 3

Cloud Hacking Methodology CEH Practice Questions (Page 3)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

10concepts

Questions 11–15

11foundation · easy
Which cloud logging and monitoring evasion technique involves altering or deleting log entries to hide malicious activity?
Select an answer first
12foundation · easy
Which cloud misconfiguration is most directly exploited by accessing a storage bucket that is publicly writable?
Select an answer first
13foundation · easy
Which phase of the cloud hacking methodology focuses on maintaining access and covering tracks after a successful compromise?
Select an answer first
14foundation · easy
Which cloud data exfiltration technique involves using a compromised storage bucket to transfer data out of the cloud?
Select an answer first
15application · medium
A security engineer is reviewing a suspicious data exfiltration incident. The attacker used a legitimate cloud API to copy sensitive data from an S3 bucket to an external storage service. The activity was not detected by the organization's monitoring tools because the API calls were made using a compromised IAM user with legitimate permissions. Which technique did the attacker use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Hacking Methodology CEH Practice Questions (Page 3)

Questions 11–15

Which cloud logging and monitoring evasion technique involves altering or deleting log entries to hide malicious activity?

Which cloud misconfiguration is most directly exploited by accessing a storage bucket that is publicly writable?

Which phase of the cloud hacking methodology focuses on maintaining access and covering tracks after a successful compromise?

Which cloud data exfiltration technique involves using a compromised storage bucket to transfer data out of the cloud?

Keep studying — Cloud Computing