A penetration tester is attempting to gain access to an Azure subscription. The tester has identified a user account that is a member of the 'Global Administrators' group. The tester does not have the password for this account. Which of the following is the MOST effective technique to compromise this account?

Use the Azure CLI to brute-force the user's password.

Perform a password spraying attack using a list of common passwords.

Send a phishing email to the user with a link to a fake Azure login page.

Attempt to reset the user's password using the 'Forgot password' feature.

A penetration tester is conducting a cloud assessment for a client. The client uses AWS and has provided only the company name. The tester discovers a public S3 bucket that contains a file named 'backup_config.json' which references an EC2 instance ID and an internal hostname. Which technique is the tester MOST directly applying, and what is the immediate next step in the methodology?

Cloud reconnaissance; use the instance ID to query the EC2 DescribeInstances API for more metadata.

Cloud reconnaissance; search for the internal hostname in public DNS records to map the network.

Cloud service enumeration; attempt to access the EC2 instance using the internal hostname.

Cloud misconfiguration exploitation; use the instance ID to assume the associated IAM role.

In cloud lateral movement, what is the primary objective?

To expand access to additional cloud resources

To escalate privileges on the current resource

A security analyst is reviewing a potential cloud attack. The attacker used a legitimate cloud management tool to perform administrative actions, which were not flagged by the organization's security monitoring because the tool is whitelisted. Which evasion technique did the attacker use?

Using legitimate tools to blend in with normal administrative activity.

Disabling audit logs to hide the actions.

Creating a backdoor account to maintain access.

Encrypting the data to hide the exfiltration.

A security engineer is investigating a data exfiltration incident. The attacker used a compromised IAM user to copy sensitive data from an S3 bucket to an external storage service. The attacker also disabled CloudTrail logging for a short period to avoid detection. Which combination of techniques did the attacker use?

Credential theft and privilege escalation

Persistence and data exfiltration

Misconfiguration exploitation and lateral movement

EC-CouncilCertified Ethical Hacker

Domain 8Objective 3

Cloud Hacking Methodology CEH Practice Questions (Page 6)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

10concepts

Questions 26–30

26application · medium
A penetration tester is attempting to gain access to an Azure subscription. The tester has identified a user account that is a member of the 'Global Administrators' group. The tester does not have the password for this account. Which of the following is the MOST effective technique to compromise this account?
Select an answer first
27application · medium
A penetration tester is conducting a cloud assessment for a client. The client uses AWS and has provided only the company name. The tester discovers a public S3 bucket that contains a file named 'backup_config.json' which references an EC2 instance ID and an internal hostname. Which technique is the tester MOST directly applying, and what is the immediate next step in the methodology?
Select an answer first
28foundation · easy
In cloud lateral movement, what is the primary objective?
Select an answer first
29expert · hard
A security analyst is reviewing a potential cloud attack. The attacker used a legitimate cloud management tool to perform administrative actions, which were not flagged by the organization's security monitoring because the tool is whitelisted. Which evasion technique did the attacker use?
Select an answer first
30expert · hard
A security engineer is investigating a data exfiltration incident. The attacker used a compromised IAM user to copy sensitive data from an S3 bucket to an external storage service. The attacker also disabled CloudTrail logging for a short period to avoid detection. Which combination of techniques did the attacker use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Hacking Methodology CEH Practice Questions (Page 6)

Questions 26–30

In cloud lateral movement, what is the primary objective?

A security analyst is reviewing a potential cloud attack. The attacker used a legitimate cloud management tool to perform administrative actions, which were not flagged by the organization's security monitoring because the tool is whitelisted. Which evasion technique did the attacker use?

Keep studying — Cloud Computing