A penetration tester is assessing a serverless application that uses AWS Lambda functions. The tester discovers that a Lambda function has an IAM role that allows 'lambda:InvokeFunction' on itself. What is the most likely risk?

The function can access other AWS services with the role's permissions.

The function can be invoked recursively, leading to infinite loops and cost escalation.

The function can delete its own IAM role.

The function can modify its own code.

A company wants to allow its employees to access AWS resources using their existing corporate Active Directory credentials. They also want to enforce MFA for all AWS console access. Which AWS service and configuration would BEST meet these requirements?

Use AWS Single Sign-On (SSO) with an external identity provider and disable MFA.

Set up an IAM identity provider for SAML 2.0 and configure the trust policy to require MFA.

Create a federation using AWS Cognito with a custom identity broker.

Create IAM users for each employee and enable MFA on each user account.

A penetration tester is conducting an assessment of a web application hosted on EC2. The application uses an IAM role attached to the EC2 instance to access an S3 bucket. The tester gains command execution on the instance. Which technique would most directly allow the tester to obtain the AWS credentials used by the application?

Use the AWS CLI command 'aws sts get-session-token' on the instance.

Search the application's source code for hardcoded access keys.

Read the environment variables of the application process.

Read the instance metadata service at http://169.254.169.254/latest/meta-data/iam/security-credentials/

GIAC Cloud Penetration Tester

Domain 3Objective 1

AWS Authentication and Cloud Services GCPN Practice Questions (Page 5)

Part of the Cloud Platform Attacks domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 21–25

21application · medium
A penetration tester is assessing a serverless application that uses AWS Lambda functions. The tester discovers that a Lambda function has an IAM role that allows 'lambda:InvokeFunction' on itself. What is the most likely risk?
Select an answer first
22foundation · easy
Which AWS service is a virtual private network (VNet) that allows you to launch AWS resources in a logically isolated section of the AWS cloud?
Select an answer first
23application · medium
A company wants to allow its employees to access AWS resources using their existing corporate Active Directory credentials. They also want to enforce MFA for all AWS console access. Which AWS service and configuration would BEST meet these requirements?
Select an answer first
24application · medium
A penetration tester is conducting an assessment of a web application hosted on EC2. The application uses an IAM role attached to the EC2 instance to access an S3 bucket. The tester gains command execution on the instance. Which technique would most directly allow the tester to obtain the AWS credentials used by the application?
Select an answer first
25foundation · easy
Which AWS credential component is a time-limited token that is included only with temporary credentials, such as those obtained by assuming an IAM role?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

AWS Authentication and Cloud Services GCPN Practice Questions (Page 5)

Questions 21–25

A penetration tester is assessing a serverless application that uses AWS Lambda functions. The tester discovers that a Lambda function has an IAM role that allows 'lambda:InvokeFunction' on itself. What is the most likely risk?

Which AWS service is a virtual private network (VNet) that allows you to launch AWS resources in a logically isolated section of the AWS cloud?

A company wants to allow its employees to access AWS resources using their existing corporate Active Directory credentials. They also want to enforce MFA for all AWS console access. Which AWS service and configuration would BEST meet these requirements?

Which AWS credential component is a time-limited token that is included only with temporary credentials, such as those obtained by assuming an IAM role?

Keep studying — Cloud Platform Attacks