CREST CREST Cloud & Infrastructure Security

Question 1

In the cloud shared responsibility model (AWS), who is responsible for patching the guest operating system on an EC2 instance?

Accepted Answer

The customer

Answer

AWS

Answer

The cloud service provider and customer jointly

Answer

A third-party managed service provider automatically

Question 2

Which attack technique involves exploiting overly permissive IAM roles or policies in AWS to escalate privileges?

Accepted Answer

IAM privilege escalation via misconfigured roles or policies

Answer

SQL injection

Answer

Cross-Site Request Forgery

Answer

ARP spoofing

Question 3

What security risk does an exposed AWS S3 bucket with public read permissions present?

Accepted Answer

It exposes stored data to the public internet, potentially leaking sensitive files

Answer

It allows unauthorized code execution on AWS Lambda

Answer

It allows modification of AWS IAM policies

Answer

It enables SSRF attacks on EC2 metadata

Question 4

What is Server-Side Request Forgery (SSRF) in a cloud context and why is it particularly dangerous on AWS?

Accepted Answer

An attack that tricks a server into making requests to internal resources, including the AWS metadata endpoint (169.254.169.254) to steal IAM credentials

Answer

An attack forging SSL certificates on web servers

Answer

Cross-site scripting targeting server-side templates

Answer

DNS rebinding targeting cloud load balancers

Question 5

Which cloud security principle recommends giving users and services only the minimum permissions needed to perform their function?

Accepted Answer

Principle of least privilege

Answer

Defense in depth

Answer

Zero trust networking

Answer

Security by obscurity

Question 6

What does a CREST assessment of containerized infrastructure (Docker/Kubernetes) typically examine?

Accepted Answer

Container escape vulnerabilities, privileged container misconfigurations, exposed Docker sockets, and RBAC weaknesses in Kubernetes

Answer

Only web application vulnerabilities within containers

Answer

Only network-level security between pods

Answer

Licensing compliance of container images