A company has a single Azure subscription with multiple resource groups. A security administrator wants to delegate management of a specific resource group to a team, but only allow them to manage VMs and not delete the resource group. Which of the following is the most appropriate role assignment?

Assign the 'Reader' role on the resource group

Assign the 'Contributor' role on the resource group

Assign the 'Owner' role on the resource group

Assign the 'Virtual Machine Contributor' role on the resource group

What is the primary security implication of using password hash synchronization with Azure AD Connect?

It prevents users from using the same password on-premises and in the cloud

It eliminates the need for on-premises Active Directory

It stores password hashes in Azure AD, which could be targeted by attackers

It requires a VPN connection for every authentication

A penetration tester has compromised a service principal that has the 'RoleManagement.ReadWrite.Directory' permission in Azure AD. The tester wants to escalate to Global Administrator. Which of the following is the most direct method?

Create a new user and assign it the Global Administrator role

Assign the Global Administrator role to the service principal itself

Modify the service principal's app permissions to include 'Directory.ReadWrite.All'

Use the service principal to reset the password of a Global Administrator

GIAC Penetration Tester (GPEN)

Domain 5Objective 1

Azure Overview, Attacks, and AD Integration GPEN Practice Questions (Page 6)

Part of the Cloud and Azure Attacks domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

Questions 26–30

26foundation · easy
In a hybrid identity configuration with Azure AD Connect, what is the authoritative source for user attributes and passwords?
Select an answer first
27foundation · easy
Which Azure AD persistence technique involves adding credentials to an existing service principal to maintain access to resources?
Select an answer first
28application · medium
A company has a single Azure subscription with multiple resource groups. A security administrator wants to delegate management of a specific resource group to a team, but only allow them to manage VMs and not delete the resource group. Which of the following is the most appropriate role assignment?
Select an answer first
29foundation · easy
What is the primary security implication of using password hash synchronization with Azure AD Connect?
Select an answer first
30expert · hard
A penetration tester has compromised a service principal that has the 'RoleManagement.ReadWrite.Directory' permission in Azure AD. The tester wants to escalate to Global Administrator. Which of the following is the most direct method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Azure Overview, Attacks, and AD Integration GPEN Practice Questions (Page 6)

Questions 26–30

In a hybrid identity configuration with Azure AD Connect, what is the authoritative source for user attributes and passwords?

Which Azure AD persistence technique involves adding credentials to an existing service principal to maintain access to resources?

A company has a single Azure subscription with multiple resource groups. A security administrator wants to delegate management of a specific resource group to a team, but only allow them to manage VMs and not delete the resource group. Which of the following is the most appropriate role assignment?

What is the primary security implication of using password hash synchronization with Azure AD Connect?

A penetration tester has compromised a service principal that has the 'RoleManagement.ReadWrite.Directory' permission in Azure AD. The tester wants to escalate to Global Administrator. Which of the following is the most direct method?

Keep studying — Cloud and Azure Attacks