Azure Applications and Attack Strategies GPEN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which Azure service is best suited for orchestrating a multi-step workflow that integrates with external SaaS applications (such as Office 365 or Salesforce) using prebuilt connectors?

   • AAzure Functions
   • BAzure Logic Apps
   • CAzure Container Instances
   • DAzure App Service
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   An attacker finds that an Azure Function app has an application setting named 'AzureWebJobsStorage' pointing to a storage account with overly permissive access. What is the most likely impact of this misconfiguration?

   • AThe attacker can execute arbitrary code on the function host
   • BThe attacker can disable the function app
   • CThe attacker can modify the function app's source code
   • DThe attacker can read and write files in the storage account used by the function app
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   You are testing an Azure Logic App that uses an Office 365 Outlook connector. The Logic App is configured with a connection that uses a user's OAuth 2.0 token. The Logic App's trigger is a recurrence that runs every hour. You find that the Logic App's definition is accessible via the Azure Resource Manager API with 'Logic App Contributor' permissions. What is the most likely attack strategy to gain access to the user's mailbox?

   • AUse the Logic App's managed identity to access the user's mailbox.
   • BUse the Logic App's 'Run' trigger to execute a new action that reads emails.
   • CModify the Logic App's definition to send the user's emails to an external address.
   • DExtract the user's password from the Logic App's connection.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a common security weakness in Azure applications where sensitive information such as connection strings or API keys is embedded directly in application source code or configuration files?

   • ACross-site scripting (XSS)
   • BExposed secrets
   • CSQL injection
   • DDenial of service (DoS)
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   An attacker who has compromised an Azure App Service plans to maintain access by creating a new user in the app's authentication provider. Which post-exploitation objective does this support?

   • APrivilege escalation
   • BMaintaining access
   • CData exfiltration
   • DLateral movement
   Reveal Solution Discussion Select an answer first