Cloud Hacking Methodology CEH Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which cloud privilege escalation technique involves modifying the trust policy of an IAM role to allow an attacker-controlled account to assume it?

   • AModifying IAM policies
   • BPhishing
   • CCredential stuffing
   • DExploiting a service-specific vulnerability
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security engineer is reviewing the configuration of an AWS account and finds that an S3 bucket has a bucket policy that allows 's3:GetObject' for any principal ('*'). The engineer also notices that the bucket is not publicly accessible via the static website hosting endpoint. Which of the following is the MOST likely risk associated with this configuration?

   • AAn attacker can read any object in the bucket if they know the object key.
   • BAn attacker can upload malicious objects to the bucket.
   • CAn attacker can delete objects from the bucket.
   • DAn attacker can list all objects in the bucket.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In the cloud hacking methodology, which phase typically follows initial reconnaissance and involves actively probing discovered cloud services for vulnerabilities?

   • AEnumeration
   • BExploitation
   • CPost-exploitation
   • DLateral movement
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst is investigating a potential cloud credential attack. The analyst notices that a legitimate user's access key was used to create a new IAM user with administrative privileges, and then the original user's key was rotated. The activity occurred outside business hours. Which attack technique is most likely being used?

   • APhishing attack to obtain the user's password.
   • BBrute-force attack on the user's password.
   • CDenial-of-service attack on the cloud API.
   • DCredential theft followed by privilege escalation and persistence.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   During a red team exercise, a tester has compromised a low-privileged user account in a GCP project. The tester discovers that the user has the 'roles/iam.securityReviewer' role on the project. Which technique is the MOST effective for the tester to escalate privileges?

   • AEnumerate all IAM policies to find a service account key that is overly permissive and can be used to authenticate as that service account.
   • BCreate a new IAM policy binding to grant the tester the 'roles/owner' role.
   • CDisable Cloud Logging to avoid detection while performing further attacks.
   • DAttempt to brute-force the passwords of all other users in the project.
   Reveal Solution Discussion Select an answer first