CompTIA PenTest+ (PT0-002) — Question 377

A team’s assessment showed that multiple AWS accounts had the same password. Which of the following is the best tool to use for auditing the AIM AWS space?

Answer options

• A. CloudBrute
• B. Hydra
• C. ScoutSuite
• D. Hashcat

Correct answer: C

Explanation

ScoutSuite is specifically designed for auditing AWS accounts, providing insights into security configurations and compliance. CloudBrute and Hydra are more focused on brute-force attacks, while Hashcat is primarily a password recovery tool, making them unsuitable for comprehensive auditing of IAM setups.