Courseiva
← CCSP
Full test
mediumMultiple ChoiceObjective-mapped

CCSP A cloud-native application is deployed on AWS Practice Question

A cloud-native application is deployed on AWS. During a security review, the team discovers that if an attacker can send a crafted request to the application, the application will make an HTTP request to http://169.254.169.254/latest/meta-data/iam/security-credentials/. Which vulnerability is being exploited?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Server-Side Request Forgery (SSRF)

Server-Side Request Forgery (SSRF) targeting the cloud metadata endpoint can expose IAM credentials. The IP 169.254.169.254 is the link-local address for cloud metadata services.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    SQL injection

    Why it's wrong here

    SQL injection targets databases, not cloud metadata.

  • ✗

    Cross-site scripting (XSS)

    Why it's wrong here

    XSS involves injecting client-side scripts, not server-side requests to metadata.

  • ✗

    Insecure deserialization

    Why it's wrong here

    Insecure deserialization involves manipulating serialized objects, not making HTTP requests.

  • ✓

    Server-Side Request Forgery (SSRF)

    Why this is correct

    SSRF allows an attacker to induce the server to make requests to internal resources, such as the cloud metadata endpoint.

About these practice questions

Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.