Cloud Penetration Testing Fundamentals GCPN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration tester is assessing a cloud environment that uses a database-as-a-service (DBaaS) offering. The client wants to test the security of the database. Which testing activity is most appropriate?

   • APerform a network scan of the database's public IP address to find open ports.
   • BAttempt to access the underlying server to test for OS vulnerabilities.
   • CAttempt to exploit known database vulnerabilities using a vulnerability scanner.
   • DReview the database configuration for weak authentication, network exposure, and encryption settings.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A cloud penetration tester is assessing a cloud environment that uses a content delivery network (CDN) to serve static content. The client wants to test the security of the CDN configuration. Which testing activity is most appropriate?

   • APerform a network scan of the CDN's edge nodes to find open ports.
   • BReview the CDN configuration for insecure cache policies, missing authentication, and misconfigured origin settings.
   • CAttempt to access the CDN's underlying servers to test for OS vulnerabilities.
   • DAttempt to exploit known CDN vulnerabilities using a vulnerability scanner.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A cloud penetration tester is assessing a multi-account AWS environment. The client wants to test the security of the organization's control tower and guardrails. The tester has been given read-only access to the management account and full access to a member account. Which testing approach is most effective?

   • AReview the control tower configurations and guardrails in the management account for misconfigurations.
   • BPerform a network scan of the management account's VPC from the member account.
   • CUse the member account to launch a new EC2 instance and test for cross-account access.
   • DAttempt to escalate privileges in the member account to gain access to the management account.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A penetration tester is assessing a cloud environment that uses a shared responsibility model. The client wants to test the security of the entire stack, from the application down to the physical infrastructure. The client has a limited budget and time. Which testing approach is most appropriate?

   • AAttempt to test the physical infrastructure by gaining access to the provider's data center.
   • BFocus on the application and data layers, and review the provider's compliance certifications for the infrastructure layers.
   • CTest all layers, including the hypervisor and physical network, using automated tools.
   • DPerform a comprehensive test of the application and infrastructure, including the provider's internal systems.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A penetration tester is contracted to assess a cloud environment that hosts a critical application. The client has two constraints: the assessment must not cause any downtime, and the tester must identify vulnerabilities that could be exploited by an external attacker. The application is behind a Web Application Firewall (WAF) and a load balancer. Which testing approach best balances these constraints?

   • APerform a full-scale penetration test from the internet, including DoS testing, to simulate a real attacker.
   • BUse only automated scanning tools to minimize manual effort and reduce the risk of downtime.
   • CConduct a configuration review of the WAF, load balancer, and cloud resources, followed by low-impact vulnerability scanning.
   • DTest the application from inside the cloud environment to avoid the WAF and load balancer.
   Reveal Solution Discussion Select an answer first