CVA CVA Cloud & Virtualization Vulnerabilities 2

Question 1

What is 'lateral movement' in the context of a cloud environment breach?

Accepted Answer

Attackers pivoting from one compromised cloud resource to access other resources within the same environment

Answer

Moving data between cloud regions

Answer

Scaling cloud resources horizontally

Answer

Migrating workloads between cloud providers

Question 2

Which Kubernetes misconfiguration exposes the cluster API server to unauthenticated access?

Accepted Answer

Leaving the API server accessible on port 6443 without authentication (anonymous-auth=true)

Answer

Enabling RBAC with default roles

Answer

Using namespaces to separate workloads

Answer

Enabling network policies

Question 3

During a cloud assessment, you discover that all developers share a single IAM access key with administrator permissions. What principle is violated?

Accepted Answer

Principle of least privilege

Answer

Defense in depth

Answer

Zero-trust architecture

Answer

Separation of duties

Question 4

What is a 'cloud storage bucket enumeration' attack?

Accepted Answer

Systematically discovering publicly accessible cloud storage buckets belonging to an organization

Answer

Deleting all files from a cloud storage bucket

Answer

Encrypting bucket contents with attacker-controlled keys

Answer

Monitoring bucket access logs for suspicious activity

Question 5

Which attack exploits the multi-tenancy nature of cloud platforms to infer information about other tenants through shared hardware resources?

Accepted Answer

Side-channel attack (e.g., Spectre/Meltdown)

Answer

Cross-tenant injection

Answer

Tenant spoofing

Answer

Resource exhaustion attack

Question 6

In assessing serverless function security (e.g., AWS Lambda), what is a key vulnerability to test for?

Accepted Answer

Insecure environment variables storing plaintext credentials

Answer

Lack of operating system patching

Answer

Insufficient RAM allocation

Answer

Missing load balancer configuration