You are analyzing a cloud application's API and have discovered an OpenAPI specification at `/swagger.json`. You need to identify all endpoints and their authentication requirements. Which approach is most efficient?

Use `dirb` to brute-force common API paths.

Manually browse the application and record every URL you visit.

Send OPTIONS requests to every possible path.

Download the spec and parse it with a tool like `jq` to extract paths and security schemes.

A penetration tester is using the Azure CLI to enumerate resources in a subscription. The tester has authenticated with a service principal and needs to ensure that the CLI uses the correct subscription ID. The tester has multiple subscriptions available. Which command should the tester run first?

`az account list --output table`

`az account show --subscription `

`az login --service-principal -u -p --tenant `

`az account set --subscription `

GIAC Cloud Penetration Tester

Domain 2Objective 2

Cloud CLI and Application Mapping GCPN Practice Questions (Page 7)

Part of the Cloud Service Discovery and Reconnaissance domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

Questions 31–35

31foundation · easy
Which file commonly contains configuration information for a cloud-hosted application?
Select an answer first
32foundation · easy
Which AWS CLI command lists all EC2 instances in the current region?
Select an answer first
33foundation · easy
Which command is used to list compute instances in a Google Cloud project using the gcloud CLI?
Select an answer first
34application · medium
You are analyzing a cloud application's API and have discovered an OpenAPI specification at `/swagger.json`. You need to identify all endpoints and their authentication requirements. Which approach is most efficient?
Select an answer first
35application · easy
A penetration tester is using the Azure CLI to enumerate resources in a subscription. The tester has authenticated with a service principal and needs to ensure that the CLI uses the correct subscription ID. The tester has multiple subscriptions available. Which command should the tester run first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Cloud CLI and Application Mapping GCPN Practice Questions (Page 7)

Questions 31–35

Which file commonly contains configuration information for a cloud-hosted application?

Which AWS CLI command lists all EC2 instances in the current region?

Which command is used to list compute instances in a Google Cloud project using the gcloud CLI?

You are analyzing a cloud application's API and have discovered an OpenAPI specification at `/swagger.json`. You need to identify all endpoints and their authentication requirements. Which approach is most efficient?

A penetration tester is using the Azure CLI to enumerate resources in a subscription. The tester has authenticated with a service principal and needs to ensure that the CLI uses the correct subscription ID. The tester has multiple subscriptions available. Which command should the tester run first?

Keep studying — Cloud Service Discovery and Reconnaissance