Cloud Penetration Testing CPENT Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which compliance framework is specifically designed for cloud service providers and includes controls for data protection and privacy?

   • AGDPR
   • BISO 27017
   • CHIPAA
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a common cloud-specific threat that arises when a storage bucket is configured to allow public read access?

   • AMisconfigured storage
   • BShared responsibility gaps
   • CInjection attacks
   • DInsecure APIs
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security tester is evaluating a cloud-based API that uses OAuth 2.0 with the 'client_credentials' grant. The API is used by multiple internal services. The tester discovers that the API's scope validation is weak and allows a client to request any scope, including 'admin'. What is the most likely impact?

   • AAn attacker can replay the token indefinitely because it has no expiration.
   • BAn attacker who obtains a client's credentials can request an admin token and perform privileged actions.
   • CAn attacker can bypass authentication entirely by sending a request without a token.
   • DAn attacker can use the API to access other clients' data because the token is not bound to a specific client.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   During an authorized penetration test of a hybrid cloud environment, you discover a virtual machine (VM) in a public cloud VNet that has a public IP address and an attached network security group (NSG) allowing inbound RDP (port 3389) from the internet. The VM is part of a domain-joined workload and hosts a legacy application. Your client wants to know the most likely initial attack vector an external attacker would use to compromise this VM. What is the most probable attack path?

   • ALeveraging a vulnerable web application hosted on the VM to execute code remotely through an application-layer exploit.
   • BUsing a phishing email to trick an administrator into installing a remote access Trojan on the VM.
   • CExploiting a misconfigured NSG that permits RDP from any source, then performing password spraying or credential stuffing against the RDP service.
   • DExploiting a misconfigured Azure Blob storage container that stores the VM's backup files, leading to credential theft.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   You are testing a Kubernetes cluster deployed in a public cloud. The cluster uses a network policy that allows all ingress traffic to pods in the 'frontend' namespace. A developer asks you to restrict access so only the 'api-gateway' service can reach the frontend pods. What should you recommend?

   • ACreate a NetworkPolicy that allows ingress from pods with the label 'app: api-gateway' and denies all other ingress to the frontend namespace.
   • BUse a service mesh like Istio to enforce mTLS and authorization policies between services.
   • CModify the security group of the underlying VMs to allow traffic only from the api-gateway's IP address.
   • DConfigure the frontend pods to only listen on localhost, preventing any external access.
   Reveal Solution Discussion Select an answer first