20+ practice questions focused on Cloud And Hybrid Infrastructure Security — one of the most tested topics on the EC-Council Certified Penetration Testing Professional (CPENT) (CPENT) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Cloud And Hybrid Infrastructure Security PracticeA penetration tester is analyzing a Kubernetes cluster deployed on AWS (EKS) where a compromised pod is running with a service account that has access to the AWS IAM OIDC provider endpoint. The pod's container is running as root and has the host network namespace enabled. Which technique allows the tester to pivot from the container to the underlying cloud infrastructure?
Explanation: In EKS with IAM Roles for Service Accounts (IRSA), the pod's projected service account token can be exchanged via the AWS IAM OIDC provider for temporary STS credentials. If the service account is annotated with an IAM role ARN, the tester can call the Kubernetes API or the STS AssumeRoleWithWebIdentity flow to obtain AWS credentials, pivoting from the container to the cloud account.
While reviewing a hybrid identity deployment utilizing Azure AD Connect, a penetration tester observes that Password Hash Sync (PHS) is enabled alongside Pass-Through Authentication (PTA). What security implication does this configuration present during an on-premises domain compromise?
Explanation: When Password Hash Sync (PHS) is enabled alongside Pass-Through Authentication (PTA), password hashes for synchronized accounts are stored in Microsoft Entra ID. This means that if the cloud tenant is compromised, the attacker could obtain those hashes and potentially crack them to recover on-premises credentials, creating a lateral movement path from cloud to on-premises.
During an Azure assessment, an auditor finds that a Logic App has an HTTP trigger with no authentication mechanism configured (Anonymous access). The Logic App has permissions to read sensitive Azure Blob Storage containers. What type of vulnerability does this represent?
Explanation: An anonymous HTTP-triggered Logic App that can read sensitive Blob Storage containers lets any unauthenticated party invoke the workflow and cause it to fetch and return data — effectively unauthenticated workflow execution leading to data exfiltration. Because the trigger URL acts as a bearer capability and the workflow's managed identity has storage read rights, the vulnerability combines missing authentication with excessive downstream permissions.
During an assessment of an Azure tenant, an attacker successfully exploits a user credential and enumerates enterprise applications. They identify a service principal with a high-privilege app role assignment (e.g., PrivilegedRoleAdministrator.ReadWrite.All). What is the primary attack path enabled by this misconfiguration?
Explanation: A service principal with the PrivilegedRoleAdministrator.ReadWrite.All app role can manage role assignments in Microsoft Entra ID, including assigning highly privileged roles like Global Administrator to other accounts. The attacker can leverage these credentials to escalate privileges by granting themselves or another account elevated roles, leading to full tenant compromise. This is a primary attack path in Microsoft Entra ID when service principals are over-privileged.
An AWS penetration tester identifies an EC2 instance configured with an IAM instance profile that grants broad s3:* permissions across all S3 buckets in the account. What AWS service feature should be recommended to restrict these permissions based on least privilege?
Explanation: AWS IAM Access Analyzer analyzes resource policies and CloudTrail logs to generate least-privilege policies based on actual access activity. It can identify unused permissions and suggest a refined policy that grants only the necessary actions, thus restricting the broad s3:* permissions. This is the recommended approach for enforcing least privilege.
+15 more Cloud And Hybrid Infrastructure Security questions available
Practice all Cloud And Hybrid Infrastructure Security questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Cloud And Hybrid Infrastructure Security. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Cloud And Hybrid Infrastructure Security questions on the CPENT frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Cloud And Hybrid Infrastructure Security is tested as part of the EC-Council Certified Penetration Testing Professional (CPENT) (CPENT) blueprint. Practicing with targeted Cloud And Hybrid Infrastructure Security questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CPENT practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Cloud And Hybrid Infrastructure Security is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Cloud And Hybrid Infrastructure Security practice session with instant scoring and detailed explanations.
Start Cloud And Hybrid Infrastructure Security Practice →