Certified Ethical Hacker Cloud Security and Penetration Testing

Question 1

Which cloud service model gives the customer the most control over the underlying infrastructure?

Accepted Answer

IaaS

Answer

IaaS (Infrastructure as a Service) gives customers the greatest control, including over operating systems, storage, and networking.

Question 2

What is the term for a cloud attack where an attacker exploits shared physical hardware to access another tenant's data?

Accepted Answer

Side-Channel Attack

Answer

A side-channel attack exploits information gained from the physical implementation of shared hardware to extract data from co-located tenants.

Question 3

Which CEH-recognized tool is commonly used for cloud infrastructure enumeration and S3 bucket discovery?

Accepted Answer

ScoutSuite

Answer

ScoutSuite is a multi-cloud security auditing tool used to enumerate cloud resources and identify misconfigurations including exposed S3 buckets.

Question 4

What type of cloud deployment model is used exclusively by a single organization and hosted either on-premises or by a third party?

Accepted Answer

Private Cloud

Answer

A private cloud is dedicated to a single organization and offers greater control and security than public cloud deployments.

Question 5

An attacker uses stolen OAuth tokens to access cloud resources without knowing the user's password. What type of attack is this?

Accepted Answer

Man-in-the-Cloud Attack

Answer

A man-in-the-cloud attack intercepts or steals OAuth tokens stored on endpoints to access cloud services without credentials.

Certified Ethical Hacker Practice Test