Cybersecurity Analyst
Cloud security and IAM questions
24 questions on Cloud security and IAM for cybersecurity analysts, easiest first.
Easy 5
Medium 7
Hard 12
- SSRF and cloud instance metadatahard
- Is this S3 bucket public?hard
- Hidden escalation with PassRolehard
- EC2 role credentials used elsewherehard
- Why S3 object reads were not loggedhard
- Effect of a permissions boundaryhard
- Risk of PassRole on all roleshard
- MFA deny that access keys bypasshard
- Access key created for someone elsehard
- Why IMDSv2 blunts SSRFhard
- Exfiltration through the S3 endpointhard
- A DDoS that targets the billhard