CPENT Cloud And Hybrid Infrastructure Security Practice Question
An auditor reviews an Azure storage account and notes that 'Secure transfer required' is set to Disabled. What security risk does this misconfiguration introduce?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data in transit between clients and the storage account can be intercepted over unencrypted HTTP connections.
Disabling secure transfer allows unencrypted HTTP connections to the storage account, enabling potential Man-in-the-Middle (MitM) attacks to intercept data in transit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Storage account access keys are transmitted in plaintext during Azure Resource Manager API calls.
Why it's wrong here
ARM API calls are always encrypted over TLS.
- ✗
Shared Access Signatures (SAS) tokens expire immediately upon generation.
Why it's wrong here
Secure transfer does not affect SAS token lifetimes.
- ✓
Data in transit between clients and the storage account can be intercepted over unencrypted HTTP connections.
Why this is correct
Disabling secure transfer permits HTTP traffic instead of enforcing HTTPS.
- ✗
Blob storage data at rest is stored without AES-256 encryption.
Why it's wrong here
Encryption at rest is enabled by default and independent of secure transfer settings.
About these practice questions
This CPENT question is part of Courseiva's 274-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.