Q. How can you detect if a Windows system is running in a virtual environment using the wmic command?

View solution

Q. What signs can indicate that a system is virtual when attacking virtual machines?

View solution

Q. In container attacks, what is the term for compromising the underlying system to attack the system containers are running on?

View solution

Q. What command can be used in Linux to determine the virtualization package running, specifically if the system is running system-d?

View solution

Q. Besides the system-detect-virt command, what other command in Linux can provide information about the virtualization package?

View solution

Q. How can you check if a system is being virtualized by examining disk IDs in Linux?

View solution

Q. Why are hypervisors a major target for penetration testers?

View solution

Q. What is a potential method for penetration testers to retain or obtain access by targeting virtual machine repositories?

View solution

Q. What is a challenge with virtual machine escape exploits in most virtualization environments?

View solution

Q. In containerization, what is a common starting point for attacks against Docker and Kubernetes?

View solution

Q. How can a penetration tester attempt to access a container's host after compromising the container?

View solution

Q. What is a key focus of attacks on containerized workload vulnerabilities?

View solution

Q. What should a penetration tester look for when hunting for misconfigurations in containerized technologies?

View solution

Q. What additional aspect should penetration testers keep in mind regarding attacks against containerized environments?

View solution

Q. What is a consideration when planning a penetration test for cloud-hosted environments?

View solution

Q. What is a potential consequence of compromised credentials acquired through phishing campaigns or breaches in cloud environments?

View solution

Q. What does account takeover as a penetration tester typically involve?

View solution

Q. In cloud environments, what is a more effective focus for a penetration tester when attacking cloud services, compared to on-premises tools?

View solution

Q. What is the AWS Metadata service used for, and how might it be exploited by attackers?

View solution

Q. What does Azure's Metadata service provide information about, and how might it be utilized by attackers?

View solution