Cloud Penetration Testing CPENT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common misconfiguration in virtual network security groups that can lead to unauthorized access?

   • AUsing private IP addresses for internal communication
   • BEnabling flow logs
   • CAllowing all inbound traffic from the internet
   • DRestricting SSH to specific IP addresses
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a common IAM weakness that can lead to authentication bypass?

   • AMisconfigured trust policies
   • BOverly permissive role assignments
   • CWeak password policies
   • DMissing multi-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a key consideration when testing the execution environment isolation of serverless functions?

   • AThe function's timeout settings
   • BThe function's memory allocation
   • CThe underlying container or VM isolation
   • DThe function's programming language
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In the IaaS service model, which of the following components is the customer responsible for securing?

   • AGuest operating system
   • BNetwork infrastructure
   • CPhysical data center security
   • DHypervisor
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A penetration tester is assessing an AWS environment and discovers that an IAM role used by an EC2 instance has a policy that allows 'iam:PassRole' on a specific role that has 'AdministratorAccess'. The tester has access to the EC2 instance. What is the most likely privilege escalation path?

   • AThe tester can use the instance's metadata service to retrieve the AdministratorAccess role's credentials.
   • BThe tester can modify the AdministratorAccess role's trust policy to allow the instance to assume it.
   • CThe tester can directly assume the AdministratorAccess role using the instance's credentials.
   • DThe tester can launch a new EC2 instance with the AdministratorAccess role and access it to gain admin privileges.
   Reveal Solution Discussion Select an answer first