During a cloud penetration test, you are enumerating an AWS account and discover an S3 bucket that is not publicly listed. You have no credentials. Which technique is most likely to reveal the bucket's existence and contents?

Guess common bucket names and attempt to access them via the S3 REST API.

Use the AWS CLI to list all buckets in the account.

Scan the bucket's IP address for open ports.

Perform a DNS zone transfer on the domain associated with the bucket.

What is the purpose of establishing persistence in a cloud environment?

To avoid detection by using encryption

To maintain access to the environment over an extended period

To immediately exfiltrate all data

Which of the following is a common vulnerability in container images?

Lack of a graphical user interface

Insecure dependencies or outdated software

Which technique is considered passive reconnaissance in a cloud environment?

Querying public DNS records to identify cloud assets

Scanning for open ports on a cloud-hosted server

Attempting to access a misconfigured storage bucket

Sending crafted HTTP requests to a web application

When communicating findings to stakeholders, what is most important?

Avoiding mention of failed attempts

Listing every minor detail of the attack

Using technical jargon to show expertise

Focusing on the business impact and risk

GIAC Cloud Penetration Tester

Domain 1Objective 2

Red Team Penetration Testing of Cloud Environments GCPN Practice Questions (Page 6)

Part of the Cloud Penetration Testing Fundamentals domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

11concepts

Questions 26–30

26application · medium
During a cloud penetration test, you are enumerating an AWS account and discover an S3 bucket that is not publicly listed. You have no credentials. Which technique is most likely to reveal the bucket's existence and contents?
Select an answer first
27foundation · easy
What is the purpose of establishing persistence in a cloud environment?
Select an answer first
28foundation · easy
Which of the following is a common vulnerability in container images?
Select an answer first
29foundation · easy
Which technique is considered passive reconnaissance in a cloud environment?
Select an answer first
30foundation · easy
When communicating findings to stakeholders, what is most important?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.