CHFI M 12: Cloud Forensics

Which of the following best defines Cloud Forensics?

• The process of analyzing physical hard drives used in a data center

• The application of digital forensic principles to cloud computing environments

• The encryption of data stored on the cloud

• The monitoring of network traffic in a local LAN

Which of the following is a major challenge in conducting cloud forensics?

• Lack of mobile device access

• Limited bandwidth

• Multi-tenancy and lack of data ownership

• High cost of digital tools

In the cloud forensic process, which step involves acquiring evidence from virtual machines, logs, and APIs?

• Identification

• Preservation

• Collection

• Examination

Which cloud service model provides the least forensic control to the investigator?

• Infrastructure as a Service (IaaS)

• Platform as a Service (PaaS)

• Software as a Service (SaaS)

• Network as a Service (NaaS)

Which of the following is NOT a type of cloud service model?

• Infrastructure as a Service (IaaS)

• Platform as a Service (PaaS)

• Software as a Service (SaaS)

• On-Premise as a Service

  (OaaS)

Which of the following cloud artifacts is most useful in investigating user access and activity?

• Virtual machine snapshots

• Hypervisor configuration files

• Cloud audit and access logs

• Container images