Cloud Penetration Testing CPENT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a governance risk in cloud environments?

   • AImplementing multi-factor authentication
   • BLack of a clear data classification policy
   • CUsing encryption for data at rest
   • DRegularly reviewing access permissions
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a common vulnerability in container images that can be exploited during a penetration test?

   • AUsing a minimal base image
   • BRunning containers as non-root user
   • CScanning images for vulnerabilities
   • DOutdated base image with known vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   As part of a cloud penetration test, you are assessing an AWS environment. You find an S3 bucket that is supposed to contain internal financial reports. The bucket policy allows 's3:GetObject' to 'Principal: *' but only from a specific IP range (203.0.113.0/24). Your client's office uses that IP range. What is the most significant security issue with this configuration?

   • AThe bucket policy allows anonymous access from any user within the specified IP range, which could include compromised machines or unauthorized users on that network.
   • BThe bucket policy is misconfigured because it uses 'Principal: *' instead of the specific IAM role ARN, which violates AWS best practices.
   • CThe bucket policy is overly permissive because it grants access to any authenticated AWS user, not just the intended application role.
   • DThe IP-based condition is ineffective because an attacker can spoof the source IP to bypass the restriction.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   After a security incident in an AWS account, you need to determine if an attacker exfiltrated data from an S3 bucket. You have CloudTrail enabled, but you are unsure if it captured all relevant events. What is the most important factor to verify to ensure you can detect the exfiltration?

   • AThe S3 bucket has versioning enabled, which allows you to recover deleted objects.
   • BCloudTrail is integrated with CloudWatch Logs for real-time monitoring.
   • CCloudTrail is enabled in all regions and the S3 bucket has data events logging enabled for 'GetObject' and 'ListBucket' actions.
   • DCloudTrail is configured to log management events, which include all API calls to S3.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A penetration tester is assessing a government contractor's cloud environment that must comply with FedRAMP. The contractor uses a public cloud provider and has implemented strong IAM policies and encryption. However, the tester finds that the cloud provider's data center is located in a foreign country. What is the most likely compliance issue?

   • AThe encryption used is not approved by FedRAMP.
   • BThe use of a public cloud is not allowed under FedRAMP.
   • CData residency requirements may be violated because the data is stored outside the country.
   • DThe IAM policies are not compliant because they are too strong.
   Reveal Solution Discussion Select an answer first