Question 1

What is "Cloud Exploitation" in the context of offensive cloud security?

Options :

A : The encryption of data stored in cloud environments

B : The monitoring and logging of cloud resource usage

C : The use of cloud services to deploy and manage security defenses

D : The act of exploiting vulnerabilities or misconfigurations in cloud infrastructure for unauthorized access or control

Answer: D

Question 2

In ISO/IEC 27001, which clause addresses the management review process?

Options :

A : Clause 9 - Performance Evaluation

B : Clause 6 - Planning

C : Clause 7 - Support

D : Clause 8 - Operation

Answer: A

Question 3

Which of the following is a common vulnerability in web applications?

Options :

A : Secure authentication mechanisms

B : Data encryption

C : Proper error handling

D : SQL Injection

Answer: D

Question 4

Which type of malware is designed to capture keystrokes from a victim's device?

Options :

A : Ransomware

B : Rootkit

C : Trojan horse

D : Keylogger

Answer: D

Question 5

What is a common method used by ransomware to spread across an organization’s network?

Options :

A : By injecting malicious code into legitimate software updates

B : Through phishing emails with malicious attachments

C : By using social engineering techniques to trick users

D : By exploiting known vulnerabilities in operating systems

Answer: B

Free SEC-100 Mock Exam – Practice Online Confidently