The SecOps Group Certified Cloud Pentesting eXpert - Azure CCPenX-Az Exam Questions
Question #6 (Topic: Demo Questions)
A compromised developer account has Reader access to a resource group. Enumerate all Azure resources in that resource group and identify the exposed App Service name.
Correct Answer: A
Explanation:
finance-reporting-api
Detailed Solution:
Set the resource group:
RG= " rg-prod-apps-eastus "
List resources:
az resource list \
--resource-group " $RG " \
--output table
Expected output:
Name ResourceGroup Location Type
---------------------- --------------------- ---------- -------------------------------
finance-reporting-api rg-prod-apps-eastus eastus Microsoft.Web/sites
prod-reportstore01 rg-prod-apps-eastus eastus Microsoft.Storage/storageAccounts
kv-finance-prod rg-prod-apps-eastus eastus Microsoft.KeyVault/vaults
The exposed App Service is:
finance-reporting-api
================