CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Platform as a Service (PaaS)

  Why it's wrong here

  Platform as a Service (PaaS) abstracts away the underlying infrastructure, providing a managed environment primarily for application deployment and execution. While PaaS providers utilize containers, they implement stringent security measures and isolation to prevent users from accessing or escaping the container's host environment. User interaction is typically confined to application code and configuration, not the underlying container orchestration or host operating system.

• ✗

  Software as a Service (SaaS)

  Why it's wrong here

  Software as a Service (SaaS) delivers fully functional applications directly to end-users over the internet, where interaction is limited to the application's user interface. The entire underlying infrastructure, including any containerized components, is completely managed and abstracted by the provider, offering no direct user access or visibility into the operational environment. Consequently, a user lacks the necessary privileges or access points to even attempt a container escape within a SaaS model.

• ✗

  Function as a Service (FaaS)

  Why it's wrong here

  Function as a Service (FaaS), a core component of serverless computing, executes ephemeral, event-driven functions in highly transient environments. Although these functions may run within containers, these containers are typically short-lived, spun up for a single execution, and then immediately terminated, making persistent exploitation or a meaningful container escape extremely challenging. The inherent statelessness and rapid lifecycle of FaaS environments significantly minimize the window and attack surface for such an exploit.

• ✓

  Infrastructure as a Service (IaaS)

  Why this is correct

  Infrastructure as a Service (IaaS) provides virtualized computing resources, such as virtual machines, networks, and storage, granting users significant control over the operating system and installed software. In an IaaS model, users frequently deploy and manage their own containerized applications, often having direct access to the container runtime and the host operating system. This elevated level of control means a successful container escape directly compromises the host VM or underlying physical server, rendering IaaS the most susceptible cloud service model for such an attack.

Go deeper

Related to this question