最新的The SecOps Group Certified Cloud Pentesting eXpert - Azure - CCPenX-Az免費考試真題
問題1
From inside the App Service environment, request an Azure Resource Manager token using the managed identity endpoint. Which resource value should be requested for Azure Resource Manager access?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
A virtual machine has a system-assigned managed identity. From the VM shell, which Azure CLI command authenticates using that identity?
正確答案: C
問題3
Using the previously gained access to the Azure environment, extract an access token from the Web App's environment and use it to impersonate its Managed Identity. Which of the following roles is assigned to the Web App's Security Principal?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題4
A compromised developer account has Reader access to a resource group. Enumerate all Azure resources in that resource group and identify the exposed App Service name.
正確答案:
See the Answer in Explanation below.
Explanation:
finance-reporting-api
Detailed Solution:
Set the resource group:
RG= " rg-prod-apps-eastus "
List resources:
az resource list \
--resource-group " $RG " \
--output table
Expected output:
Name ResourceGroup Location Type
---------------------- --------------------- ---------- ------------------------------- finance-reporting-api rg-prod-apps-eastus eastus Microsoft.Web/sites prod-reportstore01 rg-prod-apps-eastus eastus Microsoft.Storage/storageAccounts kv-finance-prod rg-prod-apps-eastus eastus Microsoft.KeyVault/vaults The exposed App Service is:
finance-reporting-api
Explanation:
finance-reporting-api
Detailed Solution:
Set the resource group:
RG= " rg-prod-apps-eastus "
List resources:
az resource list \
--resource-group " $RG " \
--output table
Expected output:
Name ResourceGroup Location Type
---------------------- --------------------- ---------- ------------------------------- finance-reporting-api rg-prod-apps-eastus eastus Microsoft.Web/sites prod-reportstore01 rg-prod-apps-eastus eastus Microsoft.Storage/storageAccounts kv-finance-prod rg-prod-apps-eastus eastus Microsoft.KeyVault/vaults The exposed App Service is:
finance-reporting-api
