Online Access Free CCPenX-Az Exam Questions

A storage account allows public blob access. Enumerate containers and identify the public container that exposes backup files.

The compromised service principal has Contributor access to a resource group but no direct Key Vault data- plane role. Can it immediately read Key Vault secret values?

• A.No, service principals cannot access Key Vault
• B.No, Contributor does not automatically grant Key Vault secret data-plane read
• C.Yes, Contributor includes secret read permissions
• D.Yes, if the vault is in the same resource group

You have been given a breached Azure user credential for an authorized lab tenant:
[email protected]
After logging in, identify the Azure Tenant ID and Subscription ID associated with the account.

You've uncovered valid credentials for another user in the previous step. Authenticate as this user and investigate their level of access within the Azure environment. Which of the following Microsoft Entra ID roles is assigned to this user?

• A.Groups Administrator
• B.User Administrator
• C.Password Administrator
• D.Helpdesk Administrator

After authenticating as the service principal, enumerate its assigned Azure RBAC role. Which role does it have?

• A.Owner
• B.Reader
• C.Contributor
• D.Storage Account Contributor