nerdexam
CSA

CCSK · Question #19

An important consideration when performing a remote vulnerability test of a cloud-based application is to

The correct answer is A. Obtain provider permission for test. You should determine whether your provider allows customers to perform a VA of their systems. If they don't, and you do it, you may find yourself blocked, because the provider won't know the source of the scan, which could be coming from bad actors.

Cloud Security Operations

Question

An important consideration when performing a remote vulnerability test of a cloud-based application is to

Options

  • AObtain provider permission for test
  • BUse techniques to evade cloud provider's detection systems
  • CUse application layer testing tools exclusively
  • DUse network layer testing tools exclusively
  • ESchedule vulnerability test at night

How the community answered

(49 responses)
  • A
    78% (38)
  • B
    2% (1)
  • C
    6% (3)
  • D
    10% (5)
  • E
    4% (2)

Explanation

You should determine whether your provider allows customers to perform a VA of their systems. If they don't, and you do it, you may find yourself blocked, because the provider won't know the source of the scan, which could be coming from bad actors.

Topics

#vulnerability testing#penetration testing#provider permission#cloud testing

Community Discussion

No community discussion yet for this question.

Full CCSK Practice