CVA CVA Cloud & Virtualization Vulnerabilities

Question 1

During a cloud environment vulnerability assessment, which service endpoint is commonly targeted to retrieve AWS credentials from an EC2 instance?

Accepted Answer

169.254.169.254 (Instance Metadata Service)

Answer

10.0.0.1 (Default Gateway)

Answer

192.168.1.1 (Cloud Router)

Answer

172.16.0.1 (Internal DNS)

Question 2

What is a 'misconfigured S3 bucket' vulnerability in AWS cloud environments?

Accepted Answer

An S3 bucket with overly permissive ACLs that allow public read or write access

Answer

An S3 bucket with insufficient storage capacity

Answer

An S3 bucket without versioning enabled

Answer

An S3 bucket with weak encryption keys

Question 3

Which attack targets virtualization platforms by exploiting a guest virtual machine to gain access to the underlying hypervisor or other VMs?

Accepted Answer

VM escape

Answer

Side-channel attack

Answer

Privilege escalation

Answer

Container breakout

Question 4

What is the primary security concern with 'shared responsibility model' misunderstandings in cloud vulnerability assessments?

Accepted Answer

Organizations assume the cloud provider secures everything, leaving their own configurations and data unprotected

Answer

Cloud providers charge more for security services

Answer

Security tools cannot run in cloud environments

Answer

Cloud providers do not allow penetration testing

Question 5

Which cloud security tool is used by assessors to identify misconfigured IAM policies, open security groups, and exposed resources in AWS environments?

Accepted Answer

ScoutSuite

Answer

Nessus

Answer

OpenVAS

Answer

Burp Suite

Question 6

In a container security assessment, what does 'privileged container' mean and why is it a risk?

Accepted Answer

A container running with all Linux capabilities and host namespace access, enabling host compromise

Answer

A container with more CPU/memory allocation, reducing performance for others

Answer

A container accessible from the internet without authentication

Answer

A container with access to encrypted secrets