AWS Authentication and Cloud Services GCPN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A penetration tester is reviewing an IAM policy that allows 's3:GetObject' on 'arn:aws:s3:::example-bucket/*'. The tester wants to escalate privileges by using this permission. Which technique would be MOST effective?

   • AAttempt to list all objects in the bucket using 's3:ListBucket'.
   • BUse the 's3:PutObject' permission to upload a malicious file.
   • CSearch the bucket for sensitive files like configuration files or scripts that may contain credentials.
   • DUse the 's3:DeleteObject' permission to remove objects.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A penetration tester is investigating a compromised EC2 instance. The instance has an IAM role attached. The tester wants to use the instance's credentials to access other AWS services. Which of the following is the most reliable method to obtain the credentials?

   • AUse the AWS CLI command 'aws iam get-role' with the instance role name.
   • BUse the AWS CLI command 'aws sts assume-role' with the instance role ARN.
   • CRead the file /root/.aws/credentials on the instance.
   • DRead the instance metadata service at http://169.254.169.254/latest/meta-data/iam/security-credentials/
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An IAM policy includes the following statement: 'Effect': 'Allow', 'Action': 'ec2:*', 'Resource': '*'. A security reviewer wants to limit the risk of privilege escalation via EC2. Which additional IAM permission should be explicitly denied to prevent a common escalation path?

   • As3:PutObject
   • Bec2:DescribeInstances
   • Cec2:RunInstances
   • Diam:PassRole
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A developer accidentally committed AWS access keys to a public GitHub repository. The keys are for an IAM user with 'ec2:DescribeInstances' and 's3:ListBucket' permissions. What is the FIRST step the developer should take to mitigate the exposure?

   • ARotate the access keys by deactivating them and creating new ones.
   • BChange the IAM user's permissions to deny all actions.
   • CContact AWS Support to have the keys revoked.
   • DDelete the GitHub repository to remove the keys from public view.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A penetration tester is investigating a potential credential leak. The tester finds an access key ID that starts with 'ASIA' and a session token. The tester wants to determine the expiration time of these credentials. Which action would provide that information?

   • AInspect the credentials file or environment variable that contains the credentials; temporary credentials often include an expiration timestamp.
   • BCall 'aws sts decode-authorization-message' on the session token.
   • CCall 'aws sts get-caller-identity' and read the 'Expiration' field in the response.
   • DCall 'aws sts get-session-token' with the credentials and read the 'Expiration' field.
   Reveal Solution Discussion Select an answer first