CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography
An attacker gains access to a cloud environment and attempts to move laterally by assuming an IAM role with higher privileges. Which cloud attack vector is the attacker exploiting?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IAM misuse
IAM misuse involves exploiting misconfigured IAM roles or policies to escalate privileges. Assuming a role with higher privileges is a form of privilege escalation via IAM abuse.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SSRF attack
Why it's wrong here
A Server-Side Request Forgery (SSRF) attack involves an attacker inducing a server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing. While SSRF can be used to access internal metadata endpoints (like AWS EC2 instance metadata service) to retrieve temporary IAM credentials, the attack itself is about making the server request, not the direct act of assuming an IAM role. The assumption of the role would be a subsequent step using the stolen credentials, making SSRF a means to an end, not the direct action described.
- ✗
S3 bucket misconfiguration
Why it's wrong here
An S3 bucket misconfiguration typically refers to overly permissive access policies, allowing unauthorized users to read, write, or delete objects within a storage bucket. While such misconfigurations can lead to data breaches, including the exposure of sensitive information like API keys or configuration files, they do not inherently facilitate the direct assumption of an IAM role with higher privileges. The core impact is data exposure or manipulation, not the escalation of identity and access management permissions through role assumption.
- ✓
IAM misuse
Why this is correct
IAM misuse directly describes scenarios where an attacker exploits existing, often overly permissive, Identity and Access Management (IAM) configurations to gain unauthorized access or elevate privileges. This frequently involves assuming an IAM role that has a trust policy configured to allow a compromised identity (e.g., another role, user, or service principal) to assume it, granting the attacker the permissions associated with that role. Such an action is a direct form of privilege escalation within the cloud environment, leveraging misconfigured trust relationships or policies.
- ✗
Container escape
Why it's wrong here
Container escape refers to a security vulnerability where an attacker breaks out of the isolation boundaries of a containerized application to gain unauthorized access to the underlying host operating system or other containers. While a successful container escape could potentially expose host credentials or provide a platform for further attacks, the act of escaping itself is about breaking process isolation, not the direct assumption of an IAM role within the cloud provider's identity system. The primary goal is lateral movement or host compromise, distinct from IAM privilege escalation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.