A penetration tester is assessing an Azure AD tenant and discovers that a service principal has the 'Application.ReadWrite.All' permission. Which of the following is the MOST effective way to escalate privileges?

Use the service principal to read all users' passwords from Azure AD.

Use the service principal to directly assign itself the 'Global Administrator' role.

Use the service principal to modify the tenant's conditional access policies to disable MFA.

Create a new application and grant it the 'User.ReadWrite.All' permission, then use it to reset passwords for privileged users.

In Azure Kubernetes Service (AKS), which component is responsible for controlling what users and service accounts can do within the cluster?

Role-Based Access Control (RBAC)

GIAC Cloud Penetration Tester

Domain 3Objective 2

Microsoft Azure Cloud Services and Attacks GCPN Practice Questions (Page 9)

Part of the Cloud Platform Attacks domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

10concepts

Questions 41–42

41application · medium
A penetration tester is assessing an Azure AD tenant and discovers that a service principal has the 'Application.ReadWrite.All' permission. Which of the following is the MOST effective way to escalate privileges?
Select an answer first
42foundation · easy
In Azure Kubernetes Service (AKS), which component is responsible for controlling what users and service accounts can do within the cluster?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Microsoft Azure Cloud Services and Attacks GCPN Practice Questions (Page 9)

Questions 41–42

A penetration tester is assessing an Azure AD tenant and discovers that a service principal has the 'Application.ReadWrite.All' permission. Which of the following is the MOST effective way to escalate privileges?

In Azure Kubernetes Service (AKS), which component is responsible for controlling what users and service accounts can do within the cluster?

Keep studying — Cloud Platform Attacks