Certified Ethical Hacker Cloud Security and Penetration Testing

Question 1

Which cloud service model gives the customer the most control over the underlying infrastructure?

Accepted Answer

IaaS

Answer

SaaS

Answer

PaaS

Answer

FaaS

Question 2

What is the term for a cloud attack where an attacker exploits shared physical hardware to access another tenant's data?

Accepted Answer

Side-Channel Attack

Answer

Man-in-the-Cloud

Answer

Cloud Hopping

Answer

Metadata Poisoning

Question 3

Which CEH-recognized tool is commonly used for cloud infrastructure enumeration and S3 bucket discovery?

Accepted Answer

ScoutSuite

Answer

Nikto

Answer

Aircrack-ng

Answer

BeEF

Question 4

What type of cloud deployment model is used exclusively by a single organization and hosted either on-premises or by a third party?

Accepted Answer

Private Cloud

Answer

Public Cloud

Answer

Hybrid Cloud

Answer

Community Cloud

Question 5

An attacker uses stolen OAuth tokens to access cloud resources without knowing the user's password. What type of attack is this?

Accepted Answer

Man-in-the-Cloud Attack

Answer

Credential Stuffing

Answer

Brute Force

Answer

Replay Attack

Question 6

Which security concept ensures that cloud provider employees cannot access customer data without authorization?

Accepted Answer

Separation of Duties

Answer

Data Sovereignty

Answer

Confidentiality SLA

Answer

Zero Trust