Certified Ethical Hacker Cloud Security and Penetration Testing 3

Question 1

What is 'cloud hopping' in the context of CEH?

Accepted Answer

Using one compromised cloud account to attack another

Answer

Moving data between cloud regions

Answer

Switching cloud providers to avoid detection

Answer

Hopping between VPCs using VPN tunnels

Question 2

Which AWS service, if misconfigured, can expose all stored objects to the public internet?

Accepted Answer

S3 Bucket ACLs

Answer

EC2 Security Groups

Answer

IAM Roles

Answer

CloudTrail Logs

Question 3

During cloud pen testing, what does 'privilege escalation via IAM misconfiguration' typically involve?

Accepted Answer

Attaching higher-privilege policies to a compromised IAM entity

Answer

Exploiting a kernel vulnerability

Answer

Cracking the root account password

Answer

Exploiting public S3 buckets

Question 4

What is the purpose of AWS CloudTrail in a security context?

Accepted Answer

Logging API calls and user activity for auditing

Answer

Load balancing across cloud regions

Answer

Encrypting data at rest

Answer

Managing IAM role assignments

Question 5

Which type of cloud attack involves injecting malicious content into a cloud service to be executed by other users or services?

Accepted Answer

Cross-Cloud Scripting (XCS)

Answer

Cloud Cryptojacking

Answer

Data Diddling

Answer

Hyperjacking

Question 6

What is 'hyperjacking' in cloud security?

Accepted Answer

Installing a rogue hypervisor to control virtual machines

Answer

Hijacking HTTP sessions in cloud apps

Answer

Exploiting cloud APIs for unauthorized access

Answer

Stealing hypervisor credentials