AWS Penetration Testing - Final Assessment

The AWS Penetration Testing Final Assessment is a mixture of multiple choice and shot text answers. This contains a number of questions to test your knowledge on all topics discussed within this series. Not all questions asked within this assessment have been explicitly answered within the reading material. However, all information has been referenced throughout the series. Good luck!

Name Email

Which Pacu command is used to display a list of valid AWS regions?

What tool can be used to bruteforce API calls allowed by the IAM policy? (Answer in lowercase)

Which privilege is required to list databases within RDS? (Answer in lowercase)

Using dynamodb, how would you list a table called "users"? (Answer in lowercase, exclude any profile)

Which S3 policy allows for read-only access?

Which Lambda JSON key would give an indication of what language the function is built in?

Language

Runtime

Source

Architecture

What command is used to list DynamoDB tables? (Answer in lowercase, exclude any profile)

Using IAM, how would you list all users? (Answer in lowercase, exclude any profile)

Which tool can be used to enumerate S3 buckets? (Answer in lowercase)

10.

Which command can be used to determine the total number of Lambda functions? (Answer in lowercase, exclude any profile)

11.

Using dynamodb, when you list tables what JSON key is assigned to the returned array?

12.

Using IAM, how would you find which policies are attached to a group? (Answer in lowercase, exclude any profile or group name)

13.

Within a CloudTrail event, which JSON key would reveal whether a user has MFA enabled?

mfaEnabled

mfaAuthenticated

mfaAuthorized

mfaStatus

14.

Which policy allows for complete control over the IAM service?

iam:FullControl

iam:AdministrativeControl

iam:FullAccess

iam:AdminAccess

15.

Which default Pacu privilege escalation module was NOT discussed in this series?

16.

Which services do Amazon allow us to test?

All Services

Permitted Services

No Services

17.

Which tool did we use to lookup the IP of an S3 bucket?

NSLookUp

Dig

Host

18.

What format does AWS use for their policies?

YAML

JSON

Markdown

XML

19.

Which Pacu command do we use to display module results?

List

Show

Display

Data

20.

Are we allowed to perform DDoS simulations on AWS services?

No, Amazon strictly prohibit this.

Yes, if we have permission from the bill payer.

Yes, as long as we have prior permission.

Yes, but only by a network partner with prior permission.

21.

What tool can we use to access the metadata service?

Web browser

AWS Command Line Tool

AWS Web Console

22.

Which service can aid in the detection of bruteforce API calls?

CloudTrail

CloudLogs

AWS Security Logger

CloudWatch

23.

Are we allowed to perform penetration tests on the S3 bucket service?

Yes, as long as it’s within scope

No, Amazon does not allow this at all

No, only S3 hosted applications

24.

What company developed Pacu? (Answer in lowercase)

25.

Using S3, how would you list buckets? (Answer in lowercase, exclude any profile)

26.

What IP address is used to access the metadata endpoint?

27.

When a secret is retrieved from the Secrets Manager service, what JSON key holds the contents?

28.

Which service allows users to create MySQL databases?

DynamoDB

RDS

AWS DB Manager

AWSDB

29.

Which command can we use to view IAM user information?

aws iam get-user –user-name arcan3

aws iam view-user –user-name arcan3

aws iam show-user –usern-ame arcan3

aws iam select-user –user-name arcan3

30.

Which Pacu module is used to enumerate the apigateway

arctil

AWS Penetration Testing – Final Assessment