CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Cross-site scripting (XSS) in the browser

  Why it's wrong here

  Cross-site scripting (XSS) is a client-side vulnerability where malicious scripts are injected into web pages and executed within a user's browser, typically to steal cookies or deface content. Server-Side Request Forgery (SSRF), conversely, is a server-side vulnerability that manipulates the server itself into making unintended HTTP requests to internal or external resources. These are fundamentally different attack vectors, with XSS targeting the client browser and SSRF targeting the server's network request capabilities.

• ✗

  Remote code execution via command injection

  Why it's wrong here

  Server-Side Request Forgery (SSRF) primarily involves coercing a server to initiate HTTP requests to arbitrary URLs, often internal ones, to retrieve information or interact with internal services. Remote code execution (RCE) via command injection, however, directly exploits vulnerabilities in how an application processes operating system commands, allowing an attacker to execute arbitrary code on the server. While SSRF can sometimes be a precursor to RCE by accessing sensitive configurations or internal services, it does not directly facilitate the execution of commands on the underlying operating system.

• ✓

  Access to cloud instance metadata

  Why this is correct

  Cloud providers expose internal metadata services (e.g., AWS EC2 metadata service at `http://169.254.169.254/latest/meta-data/`) that contain highly sensitive information about the instance, including temporary security credentials, instance roles, and network configurations. An SSRF vulnerability allows an attacker to force the vulnerable server to make requests to this internal, unauthenticated endpoint. This enables the exfiltration of critical data, such as IAM role credentials, which can lead to significant compromise and privilege escalation within the cloud environment.

• ✗

  SQL injection in the database

  Why it's wrong here

  SQL injection is a vulnerability where an attacker manipulates database queries by injecting malicious SQL code into input fields, directly affecting the application's interaction with its database. Server-Side Request Forgery (SSRF) involves manipulating the server to make HTTP requests to other network resources, not directly interacting with a database query language. While an SSRF attack might potentially target an internal service that *itself* is vulnerable to SQL injection, SSRF is not a mechanism for directly injecting SQL commands into a database.

Go deeper

Related to this question