Free The SecOps Group CCPenX-Az Exam Dumps Questions & Answers

After authenticating as the service principal, enumerate its assigned Azure RBAC role. Which role does it have?

• A.  Storage Account Contributor
• B.  Reader
• C.  Owner
• D.  Contributor

Using the managed identity principal ID discovered in the previous task, identify which Azure RBAC role is assigned to it.

• A.  Storage Blob Data Reader
• B.  Reader
• C.  Key Vault Secrets User
• D.  Contributor

During network reconnaissance of an Azure VM, you inspect its Network Security Group. Which inbound rule creates the highest risk?

• A.  Deny all inbound from Internet
• B.  Allow TCP 1433 from private subnet only
• C.  Allow TCP 22 from Internet
• D.  Allow TCP 443 from Internet

You find a SAS token in a table entity. The token starts with:
?sv=2025-01-05 & ss=b & srt=sco & sp=rl & se=2026-08-01T00:00:00Z
Which permissions does sp=rl grant?

• A.  Read and Write
• B.  Read and List
• C.  Write and Delete
• D.  List and Delete

You discover a storage account named prodreportstore01. Determine whether public blob access is enabled on the storage account.