PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ156

Vulnerability Discovery and Analysis

In a cloud environment, a security team finds that an attacker accessed confidential information used to configure virtual machines during initialization. Which of the following features could have exposed this information?

  • A IAM
  • B Block storage
  • C Virtual private cloud
  • D Metadata services
Explanation

Virtual-machine user data used during initialization can be retrieved through the instance metadata service. AWS documentation specifically notes that user data can contain configuration parameters and is accessible through instance metadata; it warns against storing sensitive data there because processes with instance access may view it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!