Certified Ethical Hacker Cloud Security and Penetration Testing 1 — Questions and Answers
Question 1: Which cloud service model gives the customer the most control over the underlying infrastructure?
- SaaS
- PaaS
- IaaS (Correct answer)
- FaaS
Correct answer: IaaS
IaaS (Infrastructure as a Service) gives customers the greatest control, including over operating systems, storage, and networking.
Question 2: What is the term for a cloud attack where an attacker exploits shared physical hardware to access another tenant's data?
- Man-in-the-Cloud
- Side-Channel Attack (Correct answer)
- Cloud Hopping
- Metadata Poisoning
Correct answer: Side-Channel Attack
A side-channel attack exploits information gained from the physical implementation of shared hardware to extract data from co-located tenants.
Question 3: Which CEH-recognized tool is commonly used for cloud infrastructure enumeration and S3 bucket discovery?
- Nikto
- ScoutSuite (Correct answer)
- Aircrack-ng
- BeEF
Correct answer: ScoutSuite
ScoutSuite is a multi-cloud security auditing tool used to enumerate cloud resources and identify misconfigurations including exposed S3 buckets.
Question 4: What type of cloud deployment model is used exclusively by a single organization and hosted either on-premises or by a third party?
- Public Cloud
- Hybrid Cloud
- Community Cloud
- Private Cloud (Correct answer)
Correct answer: Private Cloud
A private cloud is dedicated to a single organization and offers greater control and security than public cloud deployments.
Question 5: An attacker uses stolen OAuth tokens to access cloud resources without knowing the user's password. What type of attack is this?
- Credential Stuffing
- Man-in-the-Cloud Attack (Correct answer)
- Brute Force
- Replay Attack
Correct answer: Man-in-the-Cloud Attack
A man-in-the-cloud attack intercepts or steals OAuth tokens stored on endpoints to access cloud services without credentials.
Question 6: Which security concept ensures that cloud provider employees cannot access customer data without authorization?
- Data Sovereignty
- Confidentiality SLA
- Separation of Duties (Correct answer)
- Zero Trust
Correct answer: Separation of Duties
Separation of duties prevents any single individual, including cloud provider employees, from having unrestricted access to customer data.
Certified Ethical Hacker Cloud Security and Penetration Testing 1
Which cloud service model gives the customer the most control over the underlying infrastructure?