Certified Ethical Hacker Cloud Security and Penetration Testing 2

Question 1

Which attack targets the cloud management plane to gain administrative control over an entire cloud environment?

Accepted Answer

Wrapping Attack

Answer

A wrapping attack (XML Signature Wrapping) manipulates SOAP messages to the cloud management API, potentially granting attacker admin access.

Question 2

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud users and providers

Answer

A CASB acts as an intermediary between cloud users and providers to enforce security policies such as DLP, access control, and threat protection.

Question 3

During a cloud penetration test, an attacker discovers an EC2 instance metadata endpoint at 169.254.169.254. What is the risk?

Accepted Answer

Exposure of IAM credentials via SSRF

Answer

The EC2 instance metadata endpoint can expose temporary IAM role credentials when accessed via SSRF, allowing privilege escalation in AWS.

Question 4

Which tool is commonly used to test for misconfigured AWS S3 bucket permissions?

Accepted Answer

S3Scanner

Answer

S3Scanner enumerates and checks the permissions of Amazon S3 buckets to identify publicly accessible or misconfigured buckets.

Question 5

What does the shared responsibility model in cloud security define?

Accepted Answer

Which security tasks belong to the provider versus the customer

Answer

The shared responsibility model delineates which security controls are managed by the cloud provider and which are the customer's responsibility.

Certified Ethical Hacker Practice Test