A penetration tester discovers that an organization's infrastructure is hosted in the cloud. Which of the following technologies should the penetration tester explore for vulnerabilities? (Choose…

Virtualization is the fundamental technology underlying most cloud services, and hypervisor vulnerabilities or misconfigurations can allow an attacker to escape from a virtual machine to the host or other VMs. This is a critical component of IaaS (Infrastructure as a Service) offerings.

Kubernetes is a popular container orchestration platform widely used in cloud environments to deploy and manage containerized applications. Vulnerabilities in Kubernetes clusters, such as misconfigured role-based access control, exposed dashboards, or vulnerable container images, are common targets for attackers.

Docker is a containerization technology, often managed by orchestrators like Kubernetes, but Kubernetes itself represents the broader orchestration layer for potential vulnerabilities.

BIOS (Basic Input/Output System) is firmware typically found on physical servers, not a direct component or vulnerability surface relevant to cloud infrastructure managed by a cloud provider.

UEFI (Unified Extensible Firmware Interface) is also firmware, similar to BIOS, and is not a technology penetration testers directly explore for vulnerabilities within a cloud tenant's infrastructure.

DNS is a fundamental network service used everywhere, including the cloud, but it is not a cloud-specific technology in the same way virtualization or container orchestration are, and its vulnerabilities are not unique to cloud infrastructure.