Free The SecOps Group CCPenX-Az Exam Dumps Questions & Answers

The compromised service principal has Contributor access to a resource group but no direct Key Vault data- plane role. Can it immediately read Key Vault secret values?

• A.  Yes, if the vault is in the same resource group
• B.  No, Contributor does not automatically grant Key Vault secret data-plane read
• C.  Yes, Contributor includes secret read permissions
• D.  No, service principals cannot access Key Vault

You've gained access to the Azure environment, now dig deeper. One of the accessible resources contains a hidden flag.

After gaining access to the Azure tenant, enumerate all resource groups available to the compromised user.
One resource group contains the word prod. What is the name of that resource group?

You have been given a breached Azure user credential for an authorized lab tenant:
[email protected]
After logging in, identify the Azure Tenant ID and Subscription ID associated with the account.

Using the managed identity principal ID discovered in the previous task, identify which Azure RBAC role is assigned to it.

• A.  Storage Blob Data Reader
• B.  Contributor
• C.  Reader
• D.  Key Vault Secrets User