CCPenX-Az Pre-Exam Practice Tests (Updated 33 Questions) [Q15-Q34]

Rate this post

CCPenX-Az Pre-Exam Practice Tests | (Updated 33 Questions)

Valid CCPenX-Az Exam Q&A PDF – One Year Free Update

The SecOps Group CCPenX-Az Exam Syllabus Topics:

Section	Objectives
Topic 1: Real-world Azure Attack Chains (CTF Scenario)	– Flag/goal-based task completion in live environment – Multi-step exploitation chain from initial access to privilege escalation
Topic 2: Compute & Network Exploitation in Azure	– VM exploitation and lateral movement – Network misconfiguration exploitation (NSG / routing)
Topic 3: Azure Identity & Authentication Exploitation	– Privilege escalation via misconfigured roles – Token / credential abuse scenarios
Topic 4: Azure Cloud Attack Surface Enumeration	– Identity and access enumeration (Azure AD / Entra ID) – Azure resource discovery and recon
Topic 5: Azure Storage & Data Exposure	– Sensitive data extraction from storage services – Blob storage misconfiguration exploitation

NEW QUESTION 15
Using the previously gained access to the Azure environment, extract an access token from the Web App’s environment and use it to impersonate its Managed Identity. Which of the following roles is assigned to the Web App’s Security Principal?

Compute-Instance-Inspector

VM-Metadata-Reader

Storage-Metadata-Reader

AppService-Auditor

NEW QUESTION 16
A virtual machine has a system-assigned managed identity. From the VM shell, which Azure CLI command authenticates using that identity?

az login –identity

az account get-access-token –tenant

az ad signed-in-user show

az login –service-principal

NEW QUESTION 17
After authenticating as the service principal, enumerate its assigned Azure RBAC role. Which role does it have?

Reader

Contributor

Storage Account Contributor

Owner

NEW QUESTION 18
Using the previously retrieved credentials, authenticate as the App Registration within the tenant and enumerate potential lateral movement vectors. Which of the following roles is assigned to the App Registration?

Key Vault Secrets User

Cosmos DB Built-in Data Reader

Container Apps Reader Role

None of the above

NEW QUESTION 19
The App Service has a system-assigned managed identity enabled. Identify the managed identity principal ID.

NEW QUESTION 20
You are reviewing Azure Activity Logs after a lab compromise. Which operation indicates that an attacker reset another user’s password through Microsoft Entra ID?

Microsoft.Authorization/roleAssignments/write

Update user / password profile modification

Microsoft.Storage/storageAccounts/listKeys/action

Microsoft.KeyVault/vaults/secrets/read

NEW QUESTION 21
You’ve gained access to the Azure environment, now dig deeper. One of the accessible resources contains a hidden flag.

NEW QUESTION 22
The compromised service principal has Contributor access to a resource group but no direct Key Vault data- plane role. Can it immediately read Key Vault secret values?

Yes, Contributor includes secret read permissions

No, Contributor does not automatically grant Key Vault secret data-plane read

Yes, if the vault is in the same resource group

No, service principals cannot access Key Vault

NEW QUESTION 23
A compromised principal has permission to list role assignments. Identify which user has the User Access Administrator role at the resource group scope.

NEW QUESTION 24
A virtual machine has a system-assigned managed identity. From the VM shell, which Azure CLI command authenticates using that identity?

az login –service-principal

az login –identity

az account get-access-token –tenant

az ad signed-in-user show

NEW QUESTION 25
You find a SAS token in a table entity. The token starts with:
?sv=2025-01-05 & ss=b & srt=sco & sp=rl & se=2026-08-01T00:00:00Z
Which permissions does sp=rl grant?

Read and List

Read and Write

Write and Delete

List and Delete

NEW QUESTION 26
Using the privileges of the previously compromised App Registration, explore the Azure environment to identify and access sensitive information. What is the final flag retrieved from the tenant?

NEW QUESTION 27
Carefully enumerate the accessible Azure Blob Container to locate a file containing credentials for an App Registration within the tenant. What is the Application/Client ID of the discovered App Registration?