Azure Functions and Windows Containers GCPN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a primary reason why Windows containers in AKS may have a larger attack surface compared to Linux containers?

   • AWindows containers share the host kernel with the node, and Windows has a larger codebase
   • BWindows containers are always run as administrator
   • CWindows containers do not support network policies
   • DWindows containers cannot be updated
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which technique is commonly used to exploit an Azure Function that passes user input directly to a system shell command?

   • ACross-site scripting (XSS)
   • BServer-side request forgery (SSRF)
   • CCommand injection
   • DSQL injection
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A penetration tester is assessing an Azure Function app that uses multiple triggers: an HTTP trigger, a Service Bus queue trigger, and a Blob trigger. The function app has a single code base that handles all triggers. The tester discovers that the HTTP trigger is vulnerable to SSRF. Which factor most significantly increases the attack surface compared to having only an HTTP trigger?

   • AThe Blob trigger can be used to upload a malicious file that is then processed by the HTTP trigger.
   • BThe Service Bus and Blob triggers can be used to invoke the same vulnerable code with attacker-controlled input, bypassing any HTTP-specific protections.
   • CThe additional triggers increase the number of bindings, which may expose more connection strings in the function's configuration.
   • DThe Service Bus trigger can be used to send a message that causes the function to run indefinitely, leading to denial of service.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a potential method to escape a Windows container?

   • AUsing the container's network to scan the host's public IP
   • BExploiting a vulnerability in the Windows kernel that is shared with the host
   • CDeleting the container's file system
   • DRestarting the container service
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses Azure Functions for a critical API. The security team wants to monitor for suspicious activity, such as unusual trigger invocations or attempts to access sensitive bindings. Which combination of Azure services would provide the most comprehensive monitoring and alerting?

   • AAzure Security Center and Azure Sentinel to analyze security logs and generate alerts.
   • BAzure Monitor and Application Insights to collect function logs and metrics, with alerts on anomalies.
   • CAzure Policy and Azure Blueprints to enforce security configurations on the function app.
   • DAzure Log Analytics and Azure Storage Analytics to review function execution logs.
   Reveal Solution Discussion Select an answer first