CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography
Which of the following tools is specifically designed for assessing the security of AWS environments by checking for misconfigurations in services like S3, IAM, and EC2?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ScoutSuite
ScoutSuite is an open-source security auditing tool for cloud environments, including AWS. It checks for misconfigurations across multiple services and provides a detailed report.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
ScoutSuite
Why this is correct
ScoutSuite is a comprehensive open-source tool specifically engineered for auditing the security posture of multi-cloud environments, including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). It meticulously identifies security misconfigurations, adherence to best practices, and potential vulnerabilities across various services like IAM, storage, and compute. By generating an interactive HTML report, it provides a clear overview of an organization's cloud security risks, enabling targeted remediation efforts.
- ✗
Aircrack-ng
Why it's wrong here
Aircrack-ng is a powerful suite of tools primarily designed for assessing the security of 802.11 wireless networks. Its core functionalities include capturing wireless packets, cracking WEP and WPA/WPA2-PSK keys, and performing deauthentication attacks to test network resilience. This specialized toolkit focuses exclusively on wireless network vulnerabilities, making it entirely unsuitable for auditing cloud service configurations or identifying misconfigurations within cloud provider infrastructure.
- ✗
Nmap
Why it's wrong here
Nmap, or Network Mapper, is a versatile and widely used open-source utility for network discovery and security auditing. It excels at identifying active hosts on a network, enumerating open ports, detecting services running on those ports, and determining operating system types. While Nmap is invaluable for mapping network topology and identifying potential entry points on traditional networks, it does not possess the capabilities to audit cloud-specific configurations or assess the security posture of cloud services like S3 buckets or IAM policies.
- ✗
Wireshark
Why it's wrong here
Wireshark is a premier open-source network protocol analyzer that allows for deep inspection of network traffic in real-time or from captured files. It provides granular visibility into individual packets, enabling network administrators and security analysts to troubleshoot network problems, analyze protocol interactions, and perform network forensics. Its primary function is to observe and interpret data flowing across a network, which is fundamentally different from auditing the static configurations and security settings of cloud infrastructure.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.