CVA CVA Cloud & Virtualization Vulnerabilities

Question 1

During a cloud environment vulnerability assessment, which service endpoint is commonly targeted to retrieve AWS credentials from an EC2 instance?

Accepted Answer

169.254.169.254 (Instance Metadata Service)

Answer

The AWS Instance Metadata Service (IMDS) at 169.254.169.254 can expose IAM role credentials to attackers who achieve SSRF or internal access to an EC2 instance.

Question 2

What is a 'misconfigured S3 bucket' vulnerability in AWS cloud environments?

Accepted Answer

An S3 bucket with overly permissive ACLs that allow public read or write access

Answer

Misconfigured S3 buckets with public ACLs or bucket policies can expose sensitive data to the internet, making them a common source of data breaches.

Question 3

Which attack targets virtualization platforms by exploiting a guest virtual machine to gain access to the underlying hypervisor or other VMs?

Accepted Answer

VM escape

Answer

VM escape is an attack where malicious code running in a guest VM breaks out of the virtualization boundary to execute code on the hypervisor or adjacent VMs.

Question 4

What is the primary security concern with 'shared responsibility model' misunderstandings in cloud vulnerability assessments?

Accepted Answer

Organizations assume the cloud provider secures everything, leaving their own configurations and data unprotected

Answer

The shared responsibility model delineates security duties between the provider and customer; misunderstanding it leads organizations to leave their own configurations, data, and access controls unprotected.

Question 5

Which cloud security tool is used by assessors to identify misconfigured IAM policies, open security groups, and exposed resources in AWS environments?

Accepted Answer

ScoutSuite

Answer

ScoutSuite is a multi-cloud security auditing tool that assesses cloud provider configurations, identifying IAM misconfigurations, open security groups, and excessive permissions.

(CVA) Certified Vulnerability Assessor Practice Test

(CVA) Certified Vulnerability Assessor Practice Test

CVA CVA Cloud & Virtualization Vulnerabilities