Cloud Penetration Testing CPENT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key legal boundary to respect during a cloud penetration test?

   • ATesting all resources in the cloud account
   • BTesting without a written agreement
   • CTesting only resources owned by the client
   • DTesting the provider's internal network
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A penetration tester is assessing a Kubernetes cluster. The tester finds that a pod is running with the 'privileged' security context and has the ability to mount the host filesystem. What is the most significant risk associated with this configuration?

   • AThe pod can escape the container and gain access to the host node, potentially compromising the entire cluster.
   • BThe pod can modify the Kubernetes API server configuration.
   • CThe pod can read secrets from the cluster's etcd store.
   • DThe pod can access other pods' network traffic because it is privileged.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool is specifically designed to enumerate publicly exposed AWS S3 buckets?

   • AMetasploit
   • BGobuster
   • CS3Scanner
   • Dnmap
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   During a cloud penetration test of an Azure subscription, you find that a user-assigned managed identity has the 'Contributor' role assigned at the subscription level. This identity is used by a web application that only needs to read from a specific storage account. What is the most significant IAM weakness you should report?

   • AThe managed identity is exposed to the internet because it is used by a web application, making it vulnerable to token theft.
   • BThe managed identity is not properly authenticated because it uses a shared secret instead of a certificate.
   • CThe managed identity cannot be used for authorization because it is not assigned to a service principal.
   • DThe managed identity has excessive permissions that could allow an attacker who compromises the web app to create or modify resources across the entire subscription.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   You are planning a cloud penetration test for a client that uses a multi-tenant SaaS application. The client wants to test the application's security but is concerned about impacting other tenants. What is the most appropriate approach?

   • AUse a third-party scanning tool to scan the SaaS provider's entire infrastructure for vulnerabilities.
   • BPerform the test in the production environment but limit testing to the client's own tenant and data.
   • CRequest a dedicated test environment or sandbox from the SaaS provider that replicates the production configuration.
   • DTest the application's APIs directly from the internet without authentication to identify vulnerabilities.
   Reveal Solution Discussion Select an answer first