AWS Authentication and Cloud Services GCPN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a primary way for an authenticated user to interact with AWS services programmatically?

   • AAWS Command Line Interface (CLI)
   • BAWS Trusted Advisor
   • CAWS Management Console
   • DAWS CloudFormation
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A penetration tester is testing a web application that uses AWS Cognito for user authentication. The tester discovers that the Cognito identity pool has an unauthenticated role that allows 'sts:AssumeRole' with a policy that grants 's3:GetObject' on a sensitive bucket. What is the most likely risk?

   • AThe Cognito user pool can be used to brute-force user passwords.
   • BThe unauthenticated role can be used to access the Cognito user pool's user database.
   • CThe unauthenticated role can be used to escalate privileges to the authenticated role.
   • DAnyone can obtain temporary AWS credentials without authenticating and access the sensitive bucket.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A penetration tester discovers an S3 bucket that appears to be owned by the target organization. The bucket policy allows 's3:GetObject' to 'Principal: *' but only when the requester presents a valid AWS signature. The tester has no AWS account. Which approach would let the tester read objects from this bucket?

   • AUse a pre-signed URL from a public S3 website endpoint.
   • BUse the AWS CLI with anonymous access; the bucket policy allows unsigned requests.
   • CCreate a free AWS account, generate access keys, and use those keys to sign requests to the bucket.
   • DUse the bucket's static website endpoint, which bypasses IAM and bucket policies.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A penetration tester is assessing an AWS environment and finds that an IAM role has a trust policy that allows 'sts:AssumeRole' from a specific external account. The tester wants to determine if the external account is under the tester's control. Which action would BEST confirm this?

   • AAttempt to assume the role using the tester's own AWS account and check if the session is successful.
   • BUse the 'aws iam list-roles' command to list all roles in the external account.
   • CUse the 'aws iam get-role' command to retrieve the trust policy and analyze the external account ID.
   • DUse the 'aws sts decode-authorization-message' command to decode the access denied message.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which AWS service is a serverless compute service that runs code in response to events and automatically manages the underlying compute infrastructure?

   • AAmazon EC2
   • BAWS Lambda
   • CAmazon VPC
   • DAmazon S3
   Reveal Solution Discussion Select an answer first