Cloud and Container Attack Vectors Assessment

1. In container registries, what vulnerability allows unauthorized image access?

Weak authentication and unencrypted registry endpoints

Strong image signing mechanisms

Proper access logging

Image vulnerability scanning

2. How does an attacker exploit a container with an outdated base image?

Leveraging known vulnerabilities in unpatched OS or libraries

Using container scanning tools

Implementing image updates

Enforcing image signatures

3. What is the primary exploitation method for misconfigured cloud object storage ACLs?

Enumerating and downloading sensitive objects

Implementing encryption

Enabling versioning

Configuring lifecycle policies

4. Which Kubernetes component misconfiguration most directly leads to cluster takeover?

Insecure API server settings

Proper certificate management

Enabled audit logging

Network policy enforcement

5. In cloud environments, what is a common result of missing input validation in APIs?

Injection attacks and data exfiltration

Improved request handling

Better error messaging

Enhanced logging capabilities

6. What does an exposed Docker socket on a container allow an attacker to do?

Gain host-level access and escape container isolation

Improve container networking

Enable container health checks

Facilitate container logging

7. How can an attacker exploit a misconfigured cloud load balancer?

Redirect traffic to malicious endpoints or intercept credentials

Improve request distribution

Enhance availability

Reduce latency

8. What is the primary risk of running containers in privileged mode?

Complete host system compromise via container escape

Improved container performance

Better resource isolation

Enhanced security monitoring

9. Which cloud service misconfiguration exposes database credentials most frequently?

Unencrypted environment variables in container definitions

Proper secrets management implementation

Database encryption enabled

Access audit logging activated

10. What is a supply chain attack in the context of container images?

Compromising base images or dependencies to inject malware

Securing the software development lifecycle

Implementing container orchestration

Using official repositories only

11. What is the primary risk of exposing cloud metadata services like AWS IMDSv1?

Exposure of temporary security credentials

Loss of DNS resolution

Inability to scale instances

Increased network latency

12. What does a misconfigured IAM policy typically allow an attacker to do?

Assume roles with excessive permissions

Improve access control

Enhance security posture

Reduce attack surface

13. How can an attacker perform lateral movement within a cloud VPC?

Exploiting security group misconfigurations and network segmentation gaps

Using correct firewall rules

Enabling VPC Flow Logs

Implementing VPN connections

14. What is privilege escalation in a containerized environment primarily achieved through?

Running containers with excessive capabilities or as root

Using correct image scanning tools

Implementing network policies

Updating container runtime versions

15. Which API vulnerability is most commonly exploited in cloud environments?

Broken authentication and authorization

Correct HTTP header formatting

Proper SSL/TLS implementation

Standard REST naming conventions

16. In Kubernetes, what does a misconfigured RBAC (Role-Based Access Control) enable?

Unauthorized pod creation and cluster compromise

Improved network performance

Automated container updates

Enhanced logging capabilities

17. What is the primary attack vector when a container image contains hardcoded credentials?

Image registry compromise

Credential extraction during runtime or from image layers

Network segmentation bypass

Container orchestration failure

18. Which of the following is a common misconfiguration in S3 buckets that leads to data exposure?

Public read access enabled

Versioning disabled

Encryption algorithm selection

Bucket region specification

19. What does SSRF (Server-Side Request Forgery) allow an attacker to do in a cloud environment?

Bypass firewall restrictions and access internal resources

Encrypt all outbound traffic

Modify cloud storage permissions directly

Install rootkits on cloud instances

20. Which container escape technique exploits the Linux kernel to break out of container isolation?

Namespace bypass

Cgroup exploitation

Privilege escalation via kernel vulnerability

Image layer manipulation

PenTest+ Cloud and Container Attack Vectors Quiz