Cloud Security Assessment and Penetration Testing CSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   After completing a cloud penetration test, a tester is writing the final report. The tester identified a critical misconfiguration in an Azure storage account that allowed public access to sensitive data. What is the most important element to include in the report?

   • AA list of all tools used during the test, including versions.
   • BThe total cost of the penetration test.
   • CA detailed step-by-step reproduction of the vulnerability.
   • DThe names of the security team members who were involved in the test.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   During a cloud penetration test, a tester discovers that an S3 bucket used for backups is publicly readable and contains sensitive customer data. The tester also finds that the bucket's access logs are not enabled. The tester wants to confirm whether the bucket has been accessed by unauthorized parties. What is the most appropriate next step?

   • AImmediately remove the bucket's public access and report the vulnerability without further investigation.
   • BContact AWS Support to request access logs for the bucket.
   • CCheck the bucket's access logs in CloudTrail or S3 server access logs, if they exist, to determine if unauthorized access occurred.
   • DUse a network scanner to identify the IP addresses that have accessed the bucket.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security assessment of a cloud environment reveals that a database backup is stored in a publicly accessible S3 bucket. The backup contains unencrypted customer data. The company wants to remediate the issue quickly and prevent recurrence. What is the most effective remediation strategy?

   • AEnable versioning on the bucket and keep the backup as is.
   • BDelete the backup and create a new one with encryption enabled.
   • CRemove public access from the bucket and enable encryption for the backup.
   • DMove the backup to a private bucket and notify affected customers.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A penetration tester is assessing a Kubernetes cluster running on Amazon EKS. The tester needs to identify misconfigured RBAC permissions that could allow unauthorized access to the cluster's secrets. Which tool or technique is most appropriate for this task?

   • AUse kubectl to enumerate roles, role bindings, and service accounts.
   • BDeploy a privileged pod to the cluster and run commands from inside it.
   • CRun a network scan of the cluster's nodes to find open ports.
   • DUse AWS CLI to list all IAM users and their permissions.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is conducting a penetration test of a multi-account AWS environment. They have discovered that a Lambda function in one account has an IAM role that can be assumed by a role in another account. The tester wants to determine if this cross-account trust can be exploited to access sensitive data. What is the most effective way to test this?

   • ARun a network scan of the Lambda function's IP address.
   • BUse the AWS Console to switch roles and view the Lambda function's configuration.
   • CReview the IAM policy documents to see if the trust relationship is overly permissive.
   • DAssume the role from the second account and attempt to access the Lambda function's environment variables.
   Reveal Solution Discussion Select an answer first