CCPenX-Az 무료 덤프문제 온라인 액세스

The compromised service principal has Contributor access to a resource group but no direct Key Vault data- plane role. Can it immediately read Key Vault secret values?

• A.Yes, Contributor includes secret read permissions
• B.No, Contributor does not automatically grant Key Vault secret data-plane read
• C.No, service principals cannot access Key Vault
• D.Yes, if the vault is in the same resource group

Using the managed identity principal ID discovered in the previous task, identify which Azure RBAC role is assigned to it.

• A.Contributor
• B.Storage Blob Data Reader
• C.Key Vault Secrets User
• D.Reader

You've uncovered valid credentials for another user in the previous step. Authenticate as this user and investigate their level of access within the Azure environment. Which of the following Microsoft Entra ID roles is assigned to this user?

• A.Groups Administrator
• B.User Administrator
• C.Helpdesk Administrator
• D.Password Administrator

Using the previously gained access to the Azure environment, extract an access token from the Web App's environment and use it to impersonate its Managed Identity. Which of the following roles is assigned to the Web App's Security Principal?

• A.Storage-Metadata-Reader
• B.Compute-Instance-Inspector
• C.AppService-Auditor
• D.VM-Metadata-Reader

While exploring the table storage, you've uncovered information that provides limited access to a storage account. Using this access, enumerate the blob containers. Which of the following containers is available?

• A.sensitive-files
• B.confidential-store
• C.secure-dumps
• D.private-data