Server-Side Request Forgery (SSRF) WAHS Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   What is the primary risk of SSRF targeting the cloud metadata service?

   • ADeletion of the virtual machine's disk.
   • BExposure of temporary cloud credentials and instance metadata.
   • CInstallation of malware on the host operating system.
   • DModification of the instance's security group rules.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key advantage of using automated scanning tools for SSRF detection?

   • AThey can bypass all server-side input validation.
   • BThey can exploit SSRF to gain remote code execution.
   • CThey can completely eliminate false positives.
   • DThey can automatically test a wide range of URL parameters and headers for SSRF.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   Why is the cloud metadata service accessible from within a cloud environment but not from the internet?

   • AIt is hosted on a private DNS name that is not resolvable from the internet.
   • BIt is bound to a link-local IP address that is only routable within the cloud network.
   • CIt requires a special API key that is only available to cloud instances.
   • DIt is protected by a firewall that only allows requests from the instance's own IP.
   Reveal Solution Discussion Select an answer first