CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  SQL injection

  Why it's wrong here

  SQL injection is a classic web application vulnerability that exploits improper input validation, allowing attackers to manipulate backend database queries. This attack vector targets the application layer and its interaction with a database, regardless of whether the application is hosted on-premises, in a virtual machine, or within a serverless function in the cloud. While cloud environments may host applications susceptible to SQL injection, the vulnerability itself is not inherent to cloud infrastructure or services, making it a general application security concern rather than cloud-specific.

• ✗

  De-authentication attack

  Why it's wrong here

  A de-authentication attack is a denial-of-service technique specifically targeting wireless networks, where an attacker sends forged de-authentication frames to disconnect legitimate clients from an access point. This attack operates at the MAC layer (Layer 2) of the OSI model and relies on physical proximity to the wireless network infrastructure. Cloud environments, by their nature, abstract away the underlying physical network layer from the end-user or application, meaning such an attack cannot directly target cloud services or infrastructure.

• ✗

  ARP spoofing

  Why it's wrong here

  ARP spoofing, or ARP poisoning, is a network-level attack where an attacker sends forged Address Resolution Protocol (ARP) messages over a local area network. This tricks devices into associating the attacker's MAC address with the IP address of another legitimate host, enabling man-in-the-middle attacks. This vulnerability is specific to broadcast domains and local network segments. While cloud providers use virtual networks, the underlying infrastructure typically prevents direct ARP manipulation by tenants, making it not a cloud-specific threat that a tenant would directly face or exploit against cloud services.

• ✓

  S3 bucket misconfiguration

  Why this is correct

  S3 bucket misconfiguration refers to incorrectly set permissions or access control lists (ACLs) on Amazon S3 storage buckets, leading to unintended public exposure or unauthorized access to sensitive data. This is a prevalent cloud-specific threat because S3 is a fundamental cloud storage service, and its complex permission models, combined with user error or lack of understanding, frequently result in data breaches. The ease of creating and deploying S3 buckets, coupled with the potential for global access, makes misconfiguration a unique and critical cloud security challenge.

• ✓

  SSRF in cloud

  Why this is correct

  Server-Side Request Forgery (SSRF) in cloud environments is a critical vulnerability where an attacker can induce a server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing. In cloud contexts, this is particularly dangerous because it can be exploited to access internal cloud metadata services (e.g., AWS EC2 Instance Metadata Service, Azure Instance Metadata Service). These services often contain sensitive information like temporary credentials, instance roles, and network configurations, which, if compromised via SSRF, can lead to significant privilege escalation and lateral movement within the cloud infrastructure.

Go deeper

Related to this question