Module Assessment — Cloud Offensive Security Foundations

Assessment Information

Item	Details
Module	Module 01 — Cloud Offensive Security Foundations
Questions	50
Question Types	Multiple Choice, Scenario Based, Multiple Select
Passing Score	80%
Time Limit	60 Minutes
Attempts	Unlimited
Difficulty	Beginner → Intermediate

Instructions

Read every question carefully.
Some questions have multiple correct answers.
Scenario-based questions require selecting the BEST answer.
No internet resources.
Passing score: 80% (40/50)

Section 1 — Cloud Offensive Security Fundamentals

Question 1

What is the primary objective of Cloud Offensive Security?

A. Build cloud applications

B. Discover and validate security weaknesses before attackers exploit them

C. Increase cloud costs

D. Configure storage buckets

Question 2

Which cloud providers were discussed throughout this module?

A. AWS

B. Microsoft Azure

C. Google Cloud Platform

D. All of the above

Question 3

Cloud Penetration Testing should always begin with:

A. Vulnerability Scanning

B. Exploitation

C. Authorization

D. Privilege Escalation

Question 4

Which principle should guide every cloud penetration test?

A. Maximum Exploitation

B. Business Disruption

C. Rules of Engagement

D. Persistence

Question 5

Which cloud resource is most commonly targeted by attackers?

A. Hypervisor

B. Identity (IAM)

C. Physical Server

D. Cloud Provider

Section 2 — Cloud Threat Landscape

Question 6

Which of the following is NOT a common cloud attack target?

A. IAM

B. Kubernetes

C. Storage

D. Physical Data Centre Cooling Systems

Question 7

Most cloud breaches occur because of:

A. Hypervisor compromise

B. Customer misconfigurations

C. Quantum attacks

D. Hardware failure

Question 8

Which cloud service commonly stores sensitive customer data?

A. Amazon S3

B. Azure Blob Storage

C. Google Cloud Storage

D. All of the above

Question 9

Which attack commonly targets cloud identities?

A. SQL Injection

B. Credential Theft

C. DDoS

D. DNS Cache Poisoning

Question 10

The largest attack surface in most cloud environments is:

A. Networking

B. Identity

C. DNS

D. Storage Hardware

Section 3 — Reconnaissance & Enumeration

Question 11

Reconnaissance primarily aims to:

A. Delete resources

B. Gather information

C. Escalate privileges

D. Install malware

Question 12

Enumeration focuses on:

A. Guessing passwords

B. Collecting detailed technical information

C. Destroying resources

D. Installing persistence

Question 13

Passive reconnaissance generally:

A. Interacts directly with target systems

B. Uses publicly available information

C. Deletes logs

D. Deploys malware

Question 14

Which command lists Kubernetes Pods?

kubectl get pods

aws s3 ls

terraform apply

docker build

Question 15

Which AWS command lists S3 buckets?

aws s3 ls

kubectl get nodes

aws iam login

docker images

Section 4 — Identity & IAM

Question 16

Why are IAM identities attractive to attackers?

A. They control cloud access.

B. They increase CPU usage.

C. They encrypt storage.

D. They improve backups.

Question 17

Which security control best protects administrator accounts?

A. Public Access

B. Multi-Factor Authentication

C. Anonymous Login

D. Shared Passwords

Question 18

Which principle limits user permissions?

A. Maximum Privilege

B. Least Privilege

C. Anonymous Access

D. Root Access

Question 19

Which AWS feature provides temporary permissions to workloads?

A. IAM Role

B. Access Key

C. Root User

D. IAM Group

Question 20

Hardcoded cloud credentials should be stored in:

A. GitHub

B. Source Code

C. Secrets Manager

D. Dockerfile

Section 5 — Storage & Compute Security

Question 21

The most common S3 security issue is:

A. Encryption Enabled

B. Public Bucket

C. Versioning

D. Lifecycle Rules

Question 22

Which AWS service stores objects?

A. Amazon EC2

B. Amazon S3

C. Amazon VPC

D. Amazon IAM

Question 23

The EC2 Metadata Service provides:

A. Weather Information

B. Instance Metadata and Temporary Credentials

C. DNS Records

D. Application Logs

Question 24

Which version of the EC2 Metadata Service is recommended?

A. IMDSv1

B. IMDSv2

C. IMDSv0

D. Any Version

Question 25

Which service hosts virtual machines in AWS?

A. Amazon EC2

B. Amazon S3

C. Route 53

D. CloudFront

Section 6 — Kubernetes Security

Question 26

Which component controls authorization in Kubernetes?

A. RBAC

B. DNS

C. VPC

D. S3

Question 27

Running containers as which user is considered risky?

A. Non-root

B. Root

C. Nobody

D. Systemd

Question 28

Which Kubernetes object commonly stores sensitive data?

A. ConfigMap

B. Secret

C. Namespace

D. Service

Question 29

Which Kubernetes feature restricts Pod-to-Pod communication?

A. ReplicaSets

B. Network Policies

C. Deployments

D. Services

Question 30

Which Kubernetes dashboard should never be publicly accessible?

A. Metrics Server

B. Kubernetes Dashboard

C. Grafana

D. Prometheus

Section 7 — Enterprise Cloud Security

Question 31

Attack Path Analysis helps organizations:

A. Increase cloud costs

B. Understand chained vulnerabilities

C. Delete logs

D. Create backups

Question 32

Which document defines authorized testing activities?

A. Rules of Engagement

B. Password Policy

C. DNS Record

D. Dockerfile

Question 33

Professional reports should always include:

A. Business Impact

B. Evidence

C. Remediation

D. All of the above

Question 34

Which activity should always occur before exploitation?

A. Reporting

B. Authorization

C. Cleanup

D. Persistence

Question 35

The primary goal of Cloud Penetration Testing is:

A. Damage systems

B. Improve security posture

C. Delete resources

D. Install malware

Section 8 — Scenario-Based Questions

Question 36

A developer account can assume an Administrator role.

What is the primary risk?

A. Cost increase

B. Privilege Escalation

C. Backup Failure

D. DNS Failure

Question 37

An S3 bucket is publicly accessible.

What is the greatest business risk?

A. Performance

B. Data Exposure

C. Slow Storage

D. Billing

Question 38

A Kubernetes Pod runs as root and is privileged.

Which attack becomes more likely?

A. SQL Injection

B. Container Escape

C. DNS Spoofing

D. Password Spraying

Question 39

CloudTrail logging is disabled.

What is the primary concern?

A. Reduced storage costs

B. Limited visibility during incident investigations

C. Faster API calls

D. Better performance

Question 40

Developers commit AWS credentials to GitHub.

What should be done FIRST?

A. Ignore them

B. Rotate credentials immediately

C. Delete the repository only

D. Restart AWS

Section 9 — Multiple Select

Question 41

Select cloud identity services.

☐ IAM Users
☐ IAM Roles
☐ Kubernetes Service Accounts
☐ Security Groups

Question 42

Which services require security assessments?

☐ Storage
☐ Compute
☐ Kubernetes
☐ IAM

Question 43

Which activities belong to Reconnaissance?

☐ Asset Discovery
☐ DNS Enumeration
☐ Public Repository Search
☐ Destroy Logs

Question 44

Which controls reduce cloud attack surfaces?

☐ MFA
☐ Least Privilege
☐ Public Storage
☐ Network Segmentation

Question 45

Which activities occur during cloud penetration testing?

☐ Reconnaissance
☐ Enumeration
☐ Risk Analysis
☐ Reporting

Section 10 — Enterprise Scenario

Question 46

Which weakness represents the highest business risk?

Administrator accounts without MFA
Public S3 bucket containing customer data
Missing Network Policies
Outdated EC2 instance

Question 47

Which weakness would attackers most likely exploit first?

Kubernetes Dashboard exposed publicly
CloudTrail Enabled
Encrypted Storage
MFA Enabled

Question 48

Why is attack path analysis important?

A. It reduces cloud costs.

B. It demonstrates how multiple weaknesses can be chained together.

C. It removes IAM users.

D. It enables backups.

Question 49

What is the most valuable deliverable from a cloud penetration test?

A. Screenshots only

B. Executive Summary with Risk-Based Findings and Remediation

C. Command History

D. Terminal Output

Question 50

What is the overall objective of Cloud Offensive Security?

A. Exploit every vulnerability.

B. Help organizations proactively identify and reduce cloud security risks before attackers do.

C. Delete cloud resources.

D. Increase cloud costs.

Assessment Results

Score	Result
45–50	🌟 Outstanding – Ready for Module 02
40–44	✅ Pass – Strong Understanding
35–39	⚠️ Review Recommended
Below 35	❌ Retake Assessment

Module Completion

🎉 Congratulations!

You have successfully completed the Module 01 Assessment — Cloud Offensive Security Foundations.

If you achieved 80% or higher, you are ready to continue to:

➡️ Module 02 — AWS Cloud Penetration Testing

In the next module, you will move from theory into hands-on AWS penetration testing labs, learning how to assess real AWS services such as IAM, EC2, S3, VPC, Lambda, EKS and CloudTrail using enterprise methodologies and practical attack simulations.