Q. Why are hypervisors a major target for penetration testers?

View solution

Q. What is a potential method for penetration testers to retain or obtain access by targeting virtual machine repositories?

View solution

Q. What is a challenge with virtual machine escape exploits in most virtualization environments?

View solution

Q. In containerization, what is a common starting point for attacks against Docker and Kubernetes?

View solution

Q. How can a penetration tester attempt to access a container's host after compromising the container?

View solution

Q. What is a key focus of attacks on containerized workload vulnerabilities?

View solution

Q. What should a penetration tester look for when hunting for misconfigurations in containerized technologies?

View solution

Q. What additional aspect should penetration testers keep in mind regarding attacks against containerized environments?

View solution

Q. What is a consideration when planning a penetration test for cloud-hosted environments?

View solution

Q. What is a potential consequence of compromised credentials acquired through phishing campaigns or breaches in cloud environments?

View solution

Q. What does account takeover as a penetration tester typically involve?

View solution

Q. In cloud environments, what is a more effective focus for a penetration tester when attacking cloud services, compared to on-premises tools?

View solution

Q. What is the AWS Metadata service used for, and how might it be exploited by attackers?

View solution

Q. What does Azure's Metadata service provide information about, and how might it be utilized by attackers?

View solution

Q. What is one of the most common misconfigurations in cloud services that can lead to security issues?

View solution

Q. What is a common area where penetration testers may find valuable data due to misconfigurations in cloud services?

View solution

Q. When assessing an object store, what are some common things to look for?

View solution

Q. In AWS, how can you check the permissions of an S3 bucket using the command line?

View solution

Q. What type of attack focuses on secret keys and credentials to gain access to object storage buckets?

View solution

Q. In a federation scenario between on-site Active Directory environments and Azure AD, what is commonly used for authentication and authorization?

View solution