Certified Ethical Hacker Cloud Security and Penetration Testing 2

Question 1

Which attack targets the cloud management plane to gain administrative control over an entire cloud environment?

Accepted Answer

Wrapping Attack

Answer

SSRF

Answer

Hypervisor Attack

Answer

Container Escape

Question 2

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud users and providers

Answer

To replace firewalls in cloud environments

Answer

To encrypt all data stored in the cloud

Answer

To perform penetration testing on cloud services

Question 3

During a cloud penetration test, an attacker discovers an EC2 instance metadata endpoint at 169.254.169.254. What is the risk?

Accepted Answer

Exposure of IAM credentials via SSRF

Answer

Remote code execution on the host

Answer

DNS hijacking

Answer

Cross-tenant data access

Question 4

Which tool is commonly used to test for misconfigured AWS S3 bucket permissions?

Accepted Answer

S3Scanner

Answer

Gobuster

Answer

Hydra

Answer

Maltego

Question 5

What does the shared responsibility model in cloud security define?

Accepted Answer

Which security tasks belong to the provider versus the customer

Answer

How costs are split between provider and customer

Answer

The SLA for cloud uptime guarantees

Answer

How data is replicated across regions

Question 6

Which container escape technique exploits a misconfigured Docker socket mounted inside a container?

Accepted Answer

Docker socket abuse

Answer

Kernel exploit

Answer

Privileged container breakout

Answer

Namespace pivot