Online Access Free CCPenX-Az Practice Test

While exploring the table storage, you've uncovered information that provides limited access to a storage account. Using this access, enumerate the blob containers. Which of the following containers is available?

• A.sensitive-files
• B.private-data
• C.secure-dumps
• D.confidential-store

You have been given a breached Azure user credential for an authorized lab tenant:
[email protected]
After logging in, identify the Azure Tenant ID and Subscription ID associated with the account.

The compromised service principal has Contributor access to a resource group but no direct Key Vault data- plane role. Can it immediately read Key Vault secret values?

• A.Yes, if the vault is in the same resource group
• B.No, Contributor does not automatically grant Key Vault secret data-plane read
• C.No, service principals cannot access Key Vault
• D.Yes, Contributor includes secret read permissions

Using the previously retrieved credentials, authenticate as the App Registration within the tenant and enumerate potential lateral movement vectors. Which of the following roles is assigned to the App Registration?

• A.None of the above
• B.Container Apps Reader Role
• C.Key Vault Secrets User
• D.Cosmos DB Built-in Data Reader

Inside the public blob container, a file named backup-config.json contains service principal credentials. What field contains the App Registration client ID?

• A.clientId
• B.tenantId
• C.objectId
• D.clientSecret