Cloud Penetration Testing CPENT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   You are testing a Google Cloud Storage bucket that is supposed to be private. You find that the bucket has a uniform bucket-level access policy enabled, and the IAM policy grants 'roles/storage.objectViewer' to 'allUsers'. What is the most effective way to demonstrate the risk to the client?

   • AUse the Google Cloud Console to view the bucket's IAM policy and show the 'allUsers' grant.
   • BUse a third-party scanner to check for public buckets and generate a report.
   • CUse the 'gsutil' command to list and download objects from the bucket without authentication, showing that anyone can access the data.
   • DAttempt to access the bucket using a different Google account to show that it is publicly accessible.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which cloud compute resource is a virtual machine instance that can be exposed to the internet via a public IP address?

   • AAzure Function
   • BGoogle Cloud Storage
   • CAWS EC2
   • DAWS Lambda
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which API security weakness occurs when an API returns more data in its response than the client needs?

   • AImproper authorization
   • BBroken authentication
   • CExcessive data exposure
   • DInjection
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   You are leading a cloud penetration test for a client that uses a serverless architecture on AWS. The client wants to test the security of their Lambda functions, but they are concerned about the cost of running the functions during the test. What is the most cost-effective approach that still provides thorough testing?

   • AUse a combination of static analysis tools (e.g., Checkov, tfsec) on the infrastructure-as-code and targeted dynamic testing of the most critical functions.
   • BRun a full dynamic test of all Lambda functions using a tool like OWASP ZAP, which will invoke each function with various payloads.
   • CUse a third-party penetration testing service that specializes in serverless security, which will handle all testing.
   • DPerform only manual code review of the Lambda functions without executing them.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which attack surface is most directly associated with the threat of insecure APIs in a cloud environment?

   • ACloud storage buckets
   • BPhysical data centers
   • CVirtual machines
   • DManagement plane APIs
   Reveal Solution Discussion Select an answer first