CCPenX-Az by The SecOps Group Actual Free Exam Q&As

Question 1

You find a SAS token in a table entity. The token starts with:
?sv=2025-01-05 & ss=b & srt=sco & sp=rl & se=2026-08-01T00:00:00Z
Which permissions does sp=rl grant?

A. Write and Delete B. Read and List C. List and Delete D. Read and Write

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

You've uncovered valid credentials for another user in the previous step. Authenticate as this user and investigate their level of access within the Azure environment. Which of the following Microsoft Entra ID roles is assigned to this user?

A. Helpdesk Administrator B. Password Administrator C. Groups Administrator D. User Administrator

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

During network reconnaissance of an Azure VM, you inspect its Network Security Group. Which inbound rule creates the highest risk?

A. Allow TCP 1433 from private subnet only B. Deny all inbound from Internet C. Allow TCP 443 from Internet D. Allow TCP 22 from Internet

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

After authenticating as the service principal, enumerate its assigned Azure RBAC role. Which role does it have?

A. Reader B. Contributor C. Storage Account Contributor D. Owner

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

The SecOps Group Certified Cloud Pentesting eXpert - Azure - CCPenX-Az Exam Practice Test